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ABSTRACT 


Two  methods  for  predicting  the  reliability  and 
maintainability  (R/M)  of  systems  are  discussed — a simu- 
lation method  and  an  analytic  method.  Two  computer 
programs  (SIM3  and  GEMJR)  incorporating  these  methods 
and  their  input  and  output  are  described.  The  simula- 
tion method  uses  Monte  Carlo  techniques  in  predicting 
reliability.  The  analytic  method  incorporates  the 
Poisson  failure  process  to  develop  stochastic  matrices 
which  can  be  solved  using  infinite  series  to  give  re- 
liability and  availability. 

The  advantages  and  disadvantages  of  both  methods 
are  discussed.  System  configuration  changes  and  com- 
plex missions  can  be  considered  more  effectively  using 
the  simulation  method.  However,  the  simulation  method 
does  not  calculate  availability  and  provides  only  ap- 
proximate results.  In  contrast,  the  analytic  method 
predicts  exact  results  and  can  examine  such  maintenance 
aspects  as  repairmen,  standbys,  and  redundancies.  Both 
methods  are  useful  tools  depending  upon  the  R/M 
applications. 


1 


SECTION  1 
INTRODUCTION 

A January  1971  Navy  instruction  states,  "It  is  the  policy  of  the  De- 
partment of  Navy  that  logistic  support  planning  will  be  included  in  the 

design,  test,  evaluation,  production  and  operation  of  systems/equipment  at 

1* 

all  stages  beginning  with  early  conceptual  studies."  Logistics  support 
planning  has  many  facets.  One  of  those  delegated  to  the  Chief  of  Naval 
Material  involves  the  development  and  promulgation  of  "techniques  for  pre- 
dicting costs  and  optimizing  life  cycle  logistic  support  through  analysis 
of  potential  tradeoffs  between  reliability,  maintainability,  design  and 
manning  interfaces,  and  other  logistic  support  alternatives."'*'  Consequent- 
ly, the  ability  to  determine  reliability  and  maintainability  (R/M)  of 
systems  throughout  the  design  phase  is  necessary. 

The  theory  for  calculating  R/M  has  been  in  existence  for  years  but  had 
not  been  widely  applied  before  the  advent  of  the  digital  computer.  Evalua- 
tion of  the  performance  of  Navy  systems — including  ship  systems — during  the 
design  phase  has  been  facilitated  through  the  application  of  R/M  computer 
programs.  This  report  describes  two  computer  programs  utilizing  two  dif- 
ferent methods  for  calculating  R/M:  GEMJR  and  SIM3  GEMJR  utilizes  an 

2 

analytical  method;  S1M3  a simulation  method.  GEMJR  is  based  on  GEM,  a 

large,  comprehensive,  user-oriented  computer  program  which  can  solve  many 

different  R/M  problems.  Much  smaller  than  GEM,  GEMJR  is  useful  for  specific 

solutions;  however,  a user  can  easily  develop  a program  suitable  for  his 

particular  problem  by  following  the  analytic  method  incorporated  in  GEMJR. 

3 4 

The  simulation  program  SIM3  uses  Monte  Carlo  techniques  for  generating 
failure  and  repair  events.  From  the  descriptions  of  these  two  programs 
provided  in  this  report,  the  user  will  be  able  to  select  the  one  best 
suited  to  his  needs. 


*A  complete  listing  of  references  is  given  on  page  105. 


SECTION  2 
BACKGROUND 

Reliability  is  defined  as  the  probability  that  a system  will  perform 
satisfactorily — that  is,  without  failing — for  a given  period  of  lime.'’ 

The  reliability  of  a system  is  an  important  consideration  in  logistics 
planning,  for  the  fewer  the  failures,  the  less  the  maintenance  required. 
However,  the  process  for  increasing  system  reliability  must  be  considered 
in  conjunction  with  the  life  cycle  cost;  increasing  system  reliability  may 
increase  system  cost  even  though  it  may  decrease  maintenance  cost.  The 
tradeoffs  between  cost  and  reliability  are  beyond  the  scope  of  this  report. 
(Appendix  A is  an  example  of  a tradeoff  analysis.)  Only  the  methods  used 
to  determine  reliability  are  described  here. 

Maintainability,"’  defined  as  the  capacity  of  a system  to  be  restored 
to  operable  condition  within  a given  length  of  time  after  the  system  fails, 
must  also  be  considered  in  logistics  planning.  Maintainability  is  not  cal- 
culated directly;  it  is  determined  from  availability,  the  probability  that 
the  system  will  be  available  for  use  at  a given  time.  When  a system  fails, 
the  length  of  time  the  system  is  inoperable  is  affected  by  the  maintenance 
resources  (number  of  repairmen,  spare  parts,  etc.)  available.  Tradeoffs 
between  maintenance  resources  and  cost  and  time  to  repair  are  part  of  the 
logistics  planning  process. 

System  downtime  (the  time  the  system  is  inoperable  due  to  failure)  is 
affected  by  the  system  design  as  well  as  by  the  maintenance  resources 
available.  For  example,  standby  equipment  can  be  incorporated  into  the 
system  to  be  used  when  the  on-line  equipment  fails;  redundant  circuits  can 
be  included  in  the  system  for  use  when  the  primary  circuit  fails.  Such 
design  options  affect  the  cost  of  a system  and  form  a logical  part  of  the 
logistic  planning  process. 


5 


SECTION  3 

SIMULATION  RELIABILITY  PREDICTION  USING  SIM3 

The  SIM3  simulation  method  uses  Monte  Carlo  techniques^  in  predicting 
reliability.  Although  it  does  not  predict  availability  and  gives  only  ap- 
proximate results,  it  does  provide  useful  information  in  R/M  applications. 
For  a more  detailed  description  of  the  SIM3  computer  program,  see 
Appendix  B. 

j.l  SIM3  INPUT 

The  input  to  SIM3  is  of  three  types: 

• Descriptions  of  the  phases  of  the  mission  scenario 

• A system  definition  in  the  form  of  a reliability  block  diagram 
for  each  subsystem  involved  in  each  phase  of  the  mission 

• Reliability  data  in  the  form  of  mean  time  between  failures  (MTBF), 
mean  time  to  repair  (MTTR) , and  utilization  factors  (the  average  percentage 
of  time  the  equipment  is  used  during  the  mission) 

3.1.1  Mission  Scenario 

A simple  mission  for  a ship  system  may  consist  of  a single  phase — for 
example,  constant  speed  over  a given  time.  For  such  a specification  the 
system  definition  and  thus  the  configuration  of  its  subsystems  remains 
unchanged  over  its  operational  profile,  referred  to  as  the  mission  scenario. 
A complex  mission  will  involve  several  phases,  and  the  ship  equipment  con- 
figuration may  change  with  each  phase  to  perform  the  required  operations. 
Addition  or  substitution  of  equipment  or  of  whole  subsystems  may  be  re- 
quired. For  instance,  one  phase  might  call  for  half  power,  requiring  only 
one  boiler  subsystem  in  the  configuration.  A later  phase  might  need  full 
power  and  the  second  boiler  subsystem  would  be  required.  SIM3  can  easily 
accommodate  such  equipment  configuration  changes. 

3.1.2  System  Definition 

A system  is  a combination  of  equipment,  components,  and  parts  which 
perform  the  overall  functions  dictated  by  the  mission.  A complex  system 
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can  be  divided  into  one  or  more  subsystems,  each  of  which  performs  a spe- 
cific function  in  the  system.  Thus,  a system  is  essentially  an  integrated 
collection  of  subsystems,  and  a system  configuration  incorporates  all  the 
individual  subsystem  configurations. 

A system  is  defined  for  R/M  purposes  by  a reliability  block  diagram 
showing  the  equipment  in  the  system  arranged  to  enable  the  calculation  of 
R/M  characteristics  (see  Appendix  C).  When  the  mission  scenario  specifies 
changes  in  performance  from  phase  to  phase,  the  equipment  configuration, 
and  thus  the  system  definition,  may  change  correspondingly. 

3.1.3  Reliability  Data 

The  reliability  of  a system  is  derived  as  a composite  function  of  the 
probability  distributions  for  each  piece  of  equipment  in  that  system.  The 
probability  distribution  for  each  equipment  is  based  on  its  operating 
history.  Once  the  most  appropriate  distribution  has  been  determined  through 
statistical  means,  the  parameters  required  in  the  distribution  can  be 
determined. 

SIM3  uses  an  exponential  distribution  which  requires  the  parameters 
mean  time  between  failures  (MTBF)  and  mean  time  to  repair  (MTTR)  for  each 
piece  of  equipment  in  the  system.  These  parameters  are  determined  by  ob- 
serving the  occurrence  of  failures  and  times  to  repair  of  the  equipment 
under  actual  operating  conditions.  By  averaging  the  failure  and  repair 


data  over  a given  time  interval,  mean  values  are  obtained.  Although  an 
exponential  distribution  is  not  always  the  best  approximation  of  mechanical 
system  operations,  it  is  used  because  the  parameters  MTBF  and  MTTR  are  more 
easily  obtained  than  the  parameters  for  most  other  distributions. 

3.2  SIMULATION  DESCRIPTION 
3.2.1  Definitions 

The  use  of  simulation  to  determine  the  reliability  of  a system  assumes 
knowledge  of  the  operation  of  the  system  in  its  environment.  The  system's 
operation  is  simulated  by  generating  failures  and  repairs  of  all  the 
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equipment  in  the  system  over  a specified  mission  scenario.  By  the  use  of 
appropriate  criteria,  the  success  or  failure  of  the  simulated  mission  can 
be  determined. 

Because  the  generation  of  failures  and  repairs  in  the  simulation  is 
random,  the  success  or  failure  of  a single  mission  is  not  meaningful.  Many 
simulated  missions  must  be  run  to  obtain  the  reliability  of  the  system, 
which  is  defined  as  the  ratio  of  successful  missions  to  total  missions 
simulated. 

Two  examples  are  given  to  illustrate  the  application  of  Monte  Carlo 
techniques  to  generate  failures  and  repairs  in  a simulated  mission.  Reli- 
ability with  repair  is  to  be  computed  over  a specific  mission  time  period. 
To  perform  the  simulation,  the  quantities  TTF  (time  to  failure)  and  TTR 
(time  to  repair)  are  generated  for  each  equipment.  TTF  represents  an  in- 
terval from  the  time  the  equipment  begins  operation  to  the  time  when  it 
fails.  TTR  represents  the  length  of  time  required  to  repair  the  equipment 
after  it  has  failed.  The  following  algorithms  are  used  to  obtain  TTF  and 
TTR  for  an  equipment  with  mean  time  between  failure  of  MTBF  and  mean  time 
to  repair  of  MTTR: 


TTF  = -MTBF  In  RN 

TTR  = -MTTR  In  RN 

RN  is  a random  number  between  0 and  1. 

To  simulate  a mission  for  a given  scenario,  a series  of  TTF's  and 
TTR's  is  generated  for  each  equipment.  The  sequence  in  which  the  times 
are  generated  will  determine  whether  or  not  the  simulated  mission  is 
successful. 
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3.2.2  Illustrative  Example  I 

To  illustrate  the  use  of  S1M3  in  predicting  reliability,  consider 
operation  of  a system  containing  one  equipment;  when  the  equipment  fails, 
so  will  the  system. 

The  generation  of  TTF's  and  TTR's  can  be  represented  by  a time  line 
on  a one-dimensional  graph. 


MISSION 

START 


MISSION 

END 


t = t„ 


TTF,  t, 


TTF, 


tii  TTf-i  *5 


TTR, 


TTR, 


H UPSTATE 


DOWN-STATE 


During  the  mission,  equipment  can  assume  two  conditions  or  states. 

When  the  system  is  operating,  it  is  referred  to  as  being  in  an  up-state; 
when  the  system  is  not  operating  due  to  failure,  it  is  referred  to  as  being 
in  a down-state. 

The  mission  starts  at  t = 0 with  the  system  in  the  up-state.  The 
first  event  is  the  generation  of  TTF^  (time  to  the  first  failure) 


TTF1  = -MTBF  In  RN 


tQ  + TTFX  = 


At  t^,  the  system  drops  into  the  down-state  for  an  interval  TTR^  (time  for 
first  repair) 


TTR1  = -MTTR  In  RN 


t1  + TTRj^  = t2 
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At  t 2 the  equipment  is  repaired  and  resumes  operation.  Similarly,  TTF^ 
and  TTR.2  represent  the  second  time  to  failure  and  time  to  repair.  TTF^, 
the  third  time  to  failure  does  not  fail  the  system  until  after  the  mission 
ends  at  t,.  with  the  system  in  an  up-state. 

In  this  example,  whenever  the  equipment  failed  (became  inoperable), 
the  system  dropped  into  the  down-state.  In  a system  composed  of  two  equip- 
ment in  series,  similar  time-lines  are  generated.  If  either  equipment 
fails,  the  system  drops  into  the  down-state,  even  though  the  other  equip- 
ment is  still  functioning.  If  the  two  equipments  are  in  parallel,  the 
system  might  remain  in  operation  if  one  equipment  fails  depending  upon  the 
mission  requirements. 

3.2.3  Illustrative  Example  II 

This  example  further  illustrates  repair,  up-  and  down-states,  and 
other  concepts  used  in  this  simulation.  A system  made  up  of  two  equipments 
A and  B in  parallel  has  the  configuration 


The  operation  of  this  configuration  will  be  described  over  a mission  ex- 
tending from  t = 0 to  t = tg.  The  operation  of  the  system  is  specified  by 
the  up-state  rule  which  states  that,  for  a mission  to  be  successful,  either 
A or  B must  be  in  operation.  If  both  A and  B fail,  the  mission  is  aborted. 
The  system  can  assume  the  following  states: 
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and  B is  down  from  t,  to  t 


State 


Description 

A and  B both  operational 
Either  A or  B operational 
A and  B both  failed 


States  0 and  1 are  considered  up-states,  since  the  system  will  operate 
successfully  under  either  of  these  conditions.  State  2 is  a down-state. 

This  system  is  illustrated  using  two  time-lines,  one  for  A and  one  for 
B,  and  a third  time-line  indicating  the  state  of  the  system  as  the  result 
of  failures  and  repairs  of  A and  B. 


STATE  0 tl  t2  t3  t4  t5 


UP  STATE  OF  A 


DOWN-STATE  OF  A 


UPSTATE  OF  B 


DOWN-STATE  OF  B 


SYSTEM  UPSTATE 


SYSTEM  UPSTATE 


SYSTEM  DOWN-STATE 


Generating  TTF  and  TTR  as  before,  equipment  A is  down  from  t^  to  t^. 


Since  these  intervals  do  not  overlap,  the 


system  is  in  State  1 during  both  failures.  At  t,.,  B goes  down  and  the 

system  again  goes  from  State  0 to  State  1.  However,  before  B is  repaired, 

A goes  down  (at  t^)  and  the  system  fails  (State  2).  At  t^,  B is  repaired 

and  the  system  becomes  operative  again,  proceeding  to  State  1.  At  tQ  A is 

o 

repaired  and  the  system  is  restored  to  State  0. 


In  this  example,  at  least  one  of  the  two  equipments  is  required  for 
operation.  When  the  system  entered  State  2 at  t,,  the  system  failed  and 

D 

the  mission  aborted.  However,  if  the  two  equipments  had  not  failed  at  the 
same  time.  State  2 would  not  have  been  reached  and  the  mission  would  have 
been  successfully  completed. 

3.2.4  Mission  Success 

Since  TTF's  and  TTR's  are  generated  using  random  numbers,  each  simu- 
lated mission  (replication)  will  be  different.  However,  the  actual  states 
entered  and  the  times  at  which  they  are  entered  are  unimportant.  What  is 
important  for  either  of  the  illustrative  examples  is  the  continuous  opera- 
tion of  the  entire  system.  If  the  system  never  enters  a down-state,  the 
mission  is  successful. 

To  obtain  the  reliability  of  a system,  the  simulation  is  executed  with 
a given  mission  scenario  and  all  the  system  failures  are  tabulated.  At 
the  end  of  a specified*  number  of  replications,  the  reliability  is  computed. 

, _ Number  of  successful  missions 

e la  l l y Total  number  of  missions  run 

Reliability,  the  probability  that  the  system  will  successfully  perform 
the  mission  as  specified  in  the  scenario,  is  expressed  as  a statistical 
average,  the  percentage  of  successful  missions. 

3.3  SIM3  INPUT  DESCRIPTION  AND  SPECIFIC 
EXAMPLE 

Section  3.1  described  the  three  types  of  input  required  by  SIM3: 
mission  scenario,  system  definition,  and  reliability  data.  This  section 
describes  the  data  in  greater  detail. 


*The  number  of  replications  required  to  give  a specific  accuracy  can 
be  determined  stastically  or  experimentally  by  performing  sensitivity 
studies  on  the  number  of  replications. 
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3.3.1  Mission  Information 

3. 3. 1.1  Scenario.  The  mission  scenario  is  described  in  terms  of  the 
length  of  each  phase,  the  system  definition  daring  that  phase,  and  related 
information. 


3. 3. 1.2  Abort  Criteria.  One  of  the  characteristics  of  SIM3  which  adds  to 
its  usefulness  is  the  inclusion  of  abort  criteria  normally  not  available  in 
analytic  methods.  These  criteria  are  given  in  the  form  of  three  values 
(T^,  T2>  and  T^)  specified  for  all  subsystems  and  for  the  system  itself, 
where  T1  _<  T2  £ T^: 

• T^  is  defined  as  negligible  subsystem  or  system  downtime.  If  the 
subsystem  (or  the  system)  is  down  for  a time  less  than  T^,  an  equipment 
failure  is  not  recorded  and  the  mission  does  not  abort. 

• T2  is  defined  as  allowable  sustained  downtime.  Only  if  a subsystem 
(or  the  system)  is  down  for  a time  t and  t > T2  does  the  mission  abort. 

• T^  is  defined  as  allowable  cumulative  downtime.  A subsystem  (or  the 
system)  may  be  permitted  several  down  periods  (where  t^  is  a down  period) 
during  each  phase,  so  long  as  the  cumulative  total  of  such  downtimes  does 
not  exceed  a specified  limit.  Thus  if  < t^  < T2,  the  mission  will  not 

n 


abort  unless 


z 


T^  where 


n is  the  number  of  down  periods. 


i=l 

These  three  abort  criteria  enable  a realistic  simulation  of  operating 
conditions,  since  failure  of  one  subsystem  does  not  always  cause  mission 
abort.  If  these  abort  procedures  are  not  desired  in  the  simulation,  or  if 
comparison  with  analytic  methods  is  preferred,  the  setting  T^  = T2  = T^  = 0 
is  used. 


3.3.2  System  Definition 

Once  the  equipment  in  each  phase  of  the  mission  has  been  specified, 
each  equipment  will  be  identified  by  a code  which  is  entered  into  the 
program  as  input.  Figure  1 illustrates  the  use  of  the  code  in  a sample 
block  diagram  of  a simple  system.  (See  Appendix  C for  derivation  of  a 
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block  diagram.)  Each  numbered  rectangle  in  the  diagram  represents  a sepa- 
rate equipment.  The  equipment  numbers,  a different  number  for  each  piece, 
are  for  identification  purposes  only  and  have  no  other  significance. 

As  indicated  in  Figure  1 each  alternative  path  in  each  block  is  a 
separate  branch.  The  branches  are  renumbered  within  each  block.  Each 
equipment  is  located  in  one  of  the  branches  and  the  branches  are  arranged 
into  logical  blocks  of  equipment.  As  shown  in  Figure  1,  series  components 
form  one  block  (Block  2)  and  redundant  elements  form  two  separate  blocks 
(Blocks  1 and  3) . A block  must  contain  at  least  one  branch  and  a branch 
must  contain  at  least  one  piece  of  equipment.  Branches  are  numbered  con- 
secutively from  top  to  bottom.  Blocks  are  also  numbered  consecutively 
from  either  direction. 

A redundant  configuration  occurs  whenever  a block  contains  more  than 
one  branch.  It  then  becomes  necessary  to  specify  the  up-state  rule  for 
that  block,  i.e.,  the  number  of  branches  required  for  successful  operation. 
If  a block  contains  n branches  and  only  m are  required  for  system  opera- 
tion, the  up-state  rule  is  given  in  terms  of  m/n  as  shown  in  Figure  1. 

The  rules  for  mapping  a configuration  are  as  follows: 

1.  All  blocks  must  be  arranged  in  series. 

2.  All  branches  within  a block  must  be  in  parallel.  For  each  block 
an  m/n  up-state  rule  must  be  specified. 

3.  All  equipment  within  a branch  must  be  arranged  in  series. 

4.  Blocks  in  each  subsystem  must  be  consecutively  numbered. 

5.  Branches  within  a block  must  be  consecutively  numbered. 

6.  Equipment  numbers  are  for  purposes  of  identification  only. 

3.3.3  Equipment  Type  Number 

SIM3  was  written  initially  for  the  CDC  3300*  computer  where  limited 
size  necessitated  incorporating  certain  procedures  into  the  program  to 
decrease  the  amount  of  required  computer  storage.  Equipments  which  have 
exactly  the  same  MTBF,  MTTR,  and  utilization  factor  (UF)  are  grouped  into 
a type  and  assigned  a type  number.  If  two  identical  equipments  are  used 


*SIM3  has  recently  been  adapted  to  the  CDC  6700  series  computers. 


in  the  same  phase  of  a mission,  each  must  be  referred  to  by  a different 
equipment  number.  If  these  two  equipments  carry  the  same  type  number,  the 
identical  character  of  the  equipment  is  retained.  When  an  identical  equip- 
ment is  used  in  different  phases,  the  same  equipment  number  and  type  may 
be  used.  Thus  identical  equipments  are  always  referred  to  by  the  same  type 
number,  although  they  may  have  different  equipment  numbers. 

3.4  SAMPLE  CONFIGURATION 

A sample  problem  may  serve  to  clarify  the  concepts  of  type  and  equip- 
ment number,  mission,  and  system  definition  as  related  to  SIM3.  A three- 
phase  mission  may  be  diagrammed  along  a horizontal  line  (Figure  2) . 


TIME  | | 

(hr»)  q 262 

PHASE  1,  PHASE  2, 

LEVEL  2 LEVEL  1 


430  1200 

PHASE  3, 

LEVEL  2 


Figure  2 - Mission  Profile  for  System  A 


In  this  example,  the  mission  begins  at  t = 0 and  ends  at  t = 1200. 

The  mission  specifies  that  the  system  will  assume  two  levels  of  performance. 
The  configuration  for  each  level  is  shown  in  Figure  3.  During  Phases  1 
and  3,  Level  2 is  required  for  operation;  during  Phase  2,  Level  1 is 
required. 

In  Figure  3,  the  configuration  is  divided  into  four  blocks;  within 
each  block  each  rectangle  represents  an  equipment.  Only  the  configuration 
in  Block  1 changes  between  Levels  1 and  2.  The  configuration  in  Block  1 
of  Level  2 displays  redundancy;  that  in  Block  1 of  Level  1 is  arranged  in 
series. 
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The  system  diagrammed  in  Figure  3 contains  eight  types  of  equipment. 
The  type  number  for  each  equipment  is  indicated  in  the  lower  right-hand 
corner  of  each  rectangle.  Block  1,  Level  2 contains  four  different  types 
of  equipment  and  Level  1 contains  two  identical  equipments,  1 type.  In 
both  Levels  1 and  2,  Block  2 contains  three  type-2' s in  parallel  and  Block 

3 contains  two  type-4' s in  parallel,  both  redundant  configurations.  Block 

4 contains  two  different  equipments  in  series. 

When  the  equipment  in  a block  is  redundant,  an  up-state  rule  must  be 
specified.  For  Block  2,  assume  m/n  = 2/3  is  specified  i.e.,  two  of  the 
three  branches  in  parallel  must  be  operable  for  the  subsystem  to  be  opera- 
ble. For  Block  1,  Level  2 and  for  Block  3,  Levels  1 and  2,  m/n  = 1/2  is 
specified. 

Appendix  B describes  the  input  deck  setup  for  SIM3  and  includes  a 
sample  printout. 


SECTION  4 

ANALYTIC  RELIABILITY  PREDICTION  THEORY 

This  section  discusses  the  analytical  approach  to  reliability  in- 
cluding the  theory  of  the  Poisson  failure  process  and  its  incorporation  into 
the  analytic  prediction  method.  Both  exact  and  approximate  solutions  will 
be  derived  for  solving  the  set  of  differential  equations  from  which  re- 
liability and  availability  are  computed. 

4.1  THE  STOCHASTIC  MATRIX 

4.1.1  Theoretical  Aspects 

To  compute  the  reliability  of  a system  analytically,  all  the  states 
that  the  system  can  assume  must  be  identified.  Up-states  are  defined  as 
those  states  in  which  a system  is  operative.  Down-states  are  those  that 
occur  when  a system  fails.  The  configuration  of  the  equipment  in  the 
system  determines  up-states  and  down-states.  For  example,  in  a system 
composed  of  two  identical  equipments,  called  A,  the  following  three  states 
occur  (A  represents  an  equipment  that  is  up  and  A an  equipment  that  is 
down) : 

State  Symbol  and  Description 

0 AA  - both  operational 

1 AA  - one  operating  and  one  failed 

2 AA  - both  failed 

The  probabilities  for  the  three  states  are  defined  as  P^,  P^,  and 
The  system  will  always  be  in  one  of  these  three  states;  therefore,  the 
sum  of  the  three  probabilities  is  1.  The  probabilities  can  be  determined 
knowing  only  what  equipment  exists  in  the  system  configuration,  without 
knowledge  of  the  arrangement  itself.  To  determine  the  reliability  from 
the  probabilities,  the  configuration  must  be  known. 

Since  the  reliability  is  the  probability  that  a system  is  in  opera- 
tional condition,  only  the  up-states  are  used  for  computing  the  reliabili- 
ty. For  example,  if  a system  has  the  following  configuration,  consisting 
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as  State  0 in  which  both  A's  are  in  operation.  If  either  equipment  fails, 
the  system  fails.  The  reliability  of  this  configuration  is  Pq,  the  proba- 
bility that  both  equipments  are  operating. 

If  the  system  configuration  consists  of  two  equipments  arranged  in 
parallel. 


It 


3 

i 

I 
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where  redundancy  is  assumed,  then  the  operation  of  only  one  equipment  is 
required  for  system  operation,  so  the  up-states  are  0 and  1.  The  reliabil- 
ity would  equal  pq  + Pl’  the  probability  that  either  or  both  of  the  equip- 
ments are  operating. 

For  either  system  configuration.  State  2 describes  a condition  of 
system  failure.  Since  reliability  is  the  probability  that  the  system  is 
up,  P 2 is  not  considered  in  the  reliability  of  either  system  configuration. 

Once  we  have  defined  all  the  states  in  the  system,  a matrix,  called  a 
stochastic  matrix,  can  be  generated  whose  elements  represent  the  transitions 
between  these  states.  If  N represents  the  number  of  states  in  the  system, 
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the  dimensions  of  the  matrix  are  N*N.  In  the  above  example  of  two  identi- 
cal equipments,  the  stochastic  matrix  is  dimensioned  3*3,  containing  nine 
elements. 

2 

In  general,  an  NxN  matrix  has  N elements  or  transitions,  but  not  all 
of  them  are  allowed,  for  the  following  rules  must  be  observed  when  using 
the  Poisson  failure  process^: 

• The  probability  of  a transition  in  the  interval  t,  t + At  is  AAt, 
where  A is  the  failure  rate. 

• The  probability  of  more  than  one  failure  in  the  above  interval 
is  zero. 

• The  transition  probabilities  are  independent  of  the  state  of 
the  system. 

Transitions  can  occur  only  between  two  adjacent  states,  e.g.,  from 
State  0 to  State  1 or  from  1 to  2,  but  not  from  0 to  2.  The  probability 
of  a transition  from  State  0 to  State  2 is  defined  to  be  0. 

These  rules  and  the  method  for  deriving  the  transition  probabilities 
are  given  by  Sandler. ^ In  the  next  sections  the  derivation  of  the  stochas- 
tic matrix  and  the  calculations  of  reliability  and  avilability  from  the 
stochastic  matrix  will  be  illustrated.  Since  these  calculations  are  fairly 
straightforward,  emphasis  will  be  placed  on  the  derivation  of  the  stochastic 
matrix  for  various  configurations. 

4.1.2  Derivation  of  the  Stochastic 
Matrix 

The  NXN  stochastic  matrix  represents  a set  of  N simultaneous  dif- 
ferential equations  (one  equation  for  each  state).  In  simple  cases  such 
as  the  one  above,  these  equations  can  be  solved  exactly,  but  when  the 
number  of  states  becomes  large,  infinite  series  are  needed  for  a solution. 
The  accuracy  desired  in  the  series  approximation  can  be  specified.  If  the 
desired  accuracy  is  obtained,  the  solution  of  the  differential  equations 
using  series  can  then  be  considered  exact. 

For  our  first  example  of  the  construction  of  a stochastic  matrix  we 
shall  examine  the  case  of  reliability  without  repair.  Simple  expressions 
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have  been  derived  which  are  used  to  determine  the  reliability  of  a non- 
maintained  system  and  a complicated  derivation  is  unnecessary.  However, 
for  illustrative  purposes,  we  shall  indicate  how  these  expressions  can  be 
determined  by  use  of  stochastic  matrices. 

4.1.3  Reliability  without  Repair 

Each  element  in  a stochastic  matrix  represents  a transition  from  an 
initial  state,  represented  vertically,  to  a final  state,  represented 
horizontally. 

The  stochastic  matrix  for  a system  consisting  of  two  identical  pieces 

of  equipment  for  which  repair  is  not  available  and  for  which  the  failure 

rate  X = j;  is  as  follows: 

Ml  or 


Initial  States 


Final  States 


1-2X  2A 


1-A  X 


The  States  0,  1,  and  2 have  been  defined  for  a system  consisting  of 
two  pieces  of  equipment.  The  matrix  of  Equation  (1)  has  nine  elements. 

When  a transition  violates  the  rules  represented  in  Section  4.1.1,  a zero 
is  entered.  The  00  element  represents  a transition  from  an  initial  State 
0 to  a final  State  0,  i.e.,  the  probability  that  both  equipments  will 
remain  in  operable  condition  through  the  interval  dt.  This  transition 
represents  the  probability  (1-2A)  that  neither  equipment  will  fail. 

Element  01  represents  the  probability  of  transition  from  State  0 to  1,  i.e. 
the  probability  that  one  of  the  equipments  will  fail.  Since  both  equip- 
ments have  the  same  probability  of  failure,  the  transition  is  represented 
by  X + X = 2X.  The  02  element  is  zero  since  it  is  not  a transition  between 
two  adjacent  states.  Element  10  is  zero.  Since  there  is  no  repair,  the 
system  cannec  go  from  State  1 back  to  State  0.  Element  11  represents  the 


probability  that  one  of  the  pieces  of  equipment  does  not  fail  when  the  other 
already  has  failed  and  is  1 - X.  Element  12  represents  the  probability 
that  if  one  equipment  has  failed  the  second  one  will  fail  also,  and  is  X. 
Element  20  is  zero  for  it  represents  a two-state  transition.  Element  21 
is  zero,  since  repair  is  not  allowed.  Element  22  is  1,  for  when  both 
equipments  have  failed  they  will  always  remain  failed  (no  repair). 

4.1.4  Reliability  with  Repair 

If  repairs  can  be  made,  down-state  items  can  be  made  operable,  thus 
increasing  the  system  reliability.  Once  we  assume  a maintained  system, 
repairmen  must  be  introduced.  If  one  repairman  is  assigned  to  each  equip- 
ment, an  equipment  that  fails  can  be  repaired  immediately  by  a dedicated 
repairman.  If  two  or  more  equipments  are  down  at  the  same  time,  both  can 
be  repaired  simultaneously  by  two  dedicated  repairmen.  On  the  other  hand, 
if  the  number  of  repairmen  is  less  than  the  number  of  equipments  in  the 
system,  the  repair  capability  is  reduced,  decreasing  the  reliability. 

The  following  matrix  represents  a system  composed  of  two  identical 
equipments  in  parallel  with  two  repairmen,  where  y is  the  repair  rate. 


0 1 

0 /1-2A  2X 

1 I y l-(X+y) 

2 \0  2y 

The  repair  rate  is  the  reciprocal  of  the  mean  time  to  repair. 

Some  elements  of  this  matrix  are  identical  to  those  of  the  matrix  in 
which  repair  was  not  considered.  We  shall  examine  only  those  elements 
that  change  with  the  introduction  of  repair.  Element  10  is  y,  the  proba- 
bility that  one  equipment  is  repaired.  Element  11  is  1 - (X+y),  the  proba- 
bility that  one  equipment  is  not  repaired  and  the  other  does  not  fail. 
Element  21  is  y,  the  probability  that  either  equipment  is  repaired.  And 
Element  22  is  1 - 2y,  the  probability  that  neither  equipment  is  repaired. 


However,  if  only  one  repairman  is  available  for  the  two  equipments,  Ele- 
ment 21  becomes  p and  Element  22,  1 - p.  In  this  situation,  only  one 
equipment  would  be  repaired  at  a time.  The  coefficient  of  p represents 
the  number  of  repairmen  specified. 

4.1.5  Standby  Redundancy 

If  a system  has  a configuration  with  a + b identical  equipments  in 
parallel,  and  at  least  a equipments  are  required  for  continuous  operation, 
the  configuration  is  termed  redundant.  If  the  b redundant  equipments  are 
fully  operative,  active  redundancy  is  present.  If  the  b equipments  are  not 
operational  until  some  of  the  a primary  equipments  fail,  standby  redundancy 
exists. 

The  stochastic  matrix  for  a two-equipment  standby  redundant  configura- 
tion (only  one  active  equipment)  with  one  repairman  is 

0 1 2 

0 /1-A  A 0 \ 

1 ( p l-(A+p)  A ] (3) 

2 \0  p 1-p/ 


Element  00  becomes  1-A,  indicating  the  probability  that  one  equip- 
ment will  not  fail.  This  is  so,  since  only  one  equipment  is  active  and 
capable  of  failing;  the  equipment  in  standby  is  inactive  and  therefore  is 
not  considered.  The  same  argument  holds  for  Element  01  which  becomes  A. 

4.2  SOLUTION  METHODS  FOR  STATE  PROBA- 
BILITIES AND  RELIABILITIES 

4.2.1  Exact  Solution 

To  illustrate  the  exact  analytic  solution  using  the  stochastic  matrix, 


reliability  without  repair  will  be  used.  More  complicated  cases  involving 
repair  can  also  be  solved  analytically,  but  there  are  limitations.  As 
the  number  of  states  becomes  large,  approximate  methods  must  be  used. 

This  application  will  serve  mainly  to  introduce  the  theory  of  the  state 
probabilities. 
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Equation  (1),  the  stochastic  matrix  for  two  identical  equipments  with- 
out repair,  is  repeated  here: 


(1) 


' 

'i 
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Two  operations  must  be  performed  to  convert  this  matrix  into  usable 
form.  First,  l's  are  subtracted  from  all  the  diagonal  elements  and  then 
the  transpose  of  the  matrix  is  taken,  resulting  in 


(4) 


If  Pg(t),  P^(t),  and  ?2(t)  are  the  probabilities  of  the  system  being 
in  States  0,  1,  and  2,  then  their  relation  with  the  stochastic  matrix  is 


(5) 


where  (')  represents  derivatives  with  respect  to  time. 

Equation  (5)  breaks  down  into  the  following  three  simultaneous  dif- 
ferential equations: 


P£(t)  = -2A  PQ(t) 


P[(t)  = 2A  PQ(t)  - AP1(t) 


P^(t)  = AP1(t) 


27 


<6) 


(7) 


(8) 
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Since  the  system  is  fully  operational  at  t - 0,  the  initial  conditions 


are: 


V0)  = 1 

Px(0)  = 0 (9) 

P2(0)  = 0 


Using  Laplace  transforms  to  solve  Equations  (6),  (7),  and  (8)  gives  the 
following  expressions  for  the  state  probabilities: 


(10) 


2e 


-2At 


(11) 


P2  represents  a down-state  and  is  not  used  in  the  reliability  computation. 

If  the  two  equipments  are  specified  in  series,  the  reliability  results 
represent  the  probability  that  both  equipments  are  operational,  or 

Reliability  = PQ  = e"2At  (12) 

Equation  (12)  could  have  been  obtained  by  multiplying  the  reliabilities  of 
the  individual  equipments  together  (i.e.,  e-At  x e-At) . However,  if  the 
equipments  are  in  parallel,  then  the  reliability  is  the  probability  that 
at  least  one  equipment  is  operational,  stated  as 

Reliability  = PQ  + pi  = 2e~Xt  - e_2Xt 


(13) 
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This  expression  could  have  been  derived  from  the  standard  expression 
for  the  reliability  of  parallel  equipments  which  for  two  equipments  is 


Reliability  = 1 - (l-R)' 


where  R is  the  reliability  of  one  equipment. 


At 


If  we  assume  an  exponential  distribution  R = e , then 


Reliability  = 1 - (l-e"At)2 


„ -At  -2At 
= 2e  - e 


(14) 

(15) 

(16) 


and  Equation  (16)  is  the  same  as  Equation  (13). 

For  a simple  case  like  this  in  which  the  expressions  are  already 
known,  Laplace  transforms  are  not  necessary.  Their  use  is  indicated  for 
the  more  complicated  analytical  cases. 

4.2.2  Approximate  Solution 

When  the  number  of  states  becomes  large,  approximate  solutions  are 
required.  Infinite  series  are  introduced  to  facilitate  a solution. 

Let  [A]  represent  the  stochastic  matrix  of  n dimensions  and 


fi 

* i 

L 


[P(t) ] = (PQ(t),  P1(t),  P2(t)  ....  Pn(t)) 
[P(t)J  = (P0(t),  P1(t),  P2(t)  ....  Pn(t)) 


Then  the  matrix  Equation  (5)  can  be  written  as 


(17) 

(18) 

I 


lP(t)]  = [P(t)][A]  (19) 


Also,  let  the  initial  probability  state  vector  be  specified  as 


IP(0)]  = (PQ(0),  Px(0) Pn(0))  (20) 


so  that  the  solution  of  the  matrix  equation  is  of  the  form 


[P(t)]  = e[A]t  [PQ] 


(21) 


To  evaluate  this  expression,  the  infinite  series  expansion  for  the 
[Alt 

exponential  function  e is  used. 


2 2 


:[A]t  = [I]  + [A]  t + M,*-  + . 


iMiti 


-Z1 


[A]V 

j! 


j=0 


(22) 


In  this  series,  t is  the  time  variable  and  [I]  is  the  n*n  identity  matrix 

(l's  in  the  diagonal  elements  and  zero's  elsewhere). 

[Alt 

The  infinite  series  e can  be  evaluated  for  a specified  number  of 
terms  providing  t does  not  become  much  greater  than  | | A | | (the  magnitude 
of  [A]).  If  t >>  | | A | |,  the  series  will  not  converge.  To  make  the  solu- 
tion of  Equation  (21)  generally  applicable,  it  is  necessary  to  eliminate 
any  possibility  of  nonconvergence.  As  an  illustration,  let  us  represent 
the  matrix  equation  [P(t)]  = [P (t ) ] [A]  in  a different  form  as 


y (t)  = Ay  (t) 


(23) 


where  y is  an  n-dimensional  column  vector  and  A is  an  n*n  matrix. 
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To  overcome  the  problem  of  nonconvergence  when  t >>  | ] A | | , an  iterative 
procedure  is  introduced  which  allows  the  evaluation  of  the  series  with  an 
increment  At  of  t,  instead  of  t itself.  The  value  of  At  is  of  the  same 
order  of  magnitude  as  A in  order  to  force  the  series  to  converge.  The 
solution  of  Equation  (23)  is  in  the  form 


At 

y(t)  = e y 


I 


This  equation  should  hold  (theoretically)  for  any  value  of  t.  Thus,  if 
t -►  t + At,  the  equation  becomes 


. A(t+At) 
y (t+At)  = e : 


At  AAt 
= e e yr 


AAt  At 
= e e y 


y(t+At)  = eAAty(t) 


since  y(t)  = e yQ. 

To  determine  y(t+At),  we  need  evaluate  only  the  series 


elAjAt  _ [r]  + jAjAt  + 


instead  of  e 

Consequently,  to  evaluate  y(t)  for  any  t,  the  series  e^At  has  only 
to  be  evaluated  once. 

The  iteration  process  will  be  illustrated  by  indicating  how  the  value 
of  y(t)  for  t = T is  obtained.  T is  a specified  time  interval  (measured 
from  t = 0)  and  is  much  larger  than  [A].  An  increment  At  is  chosen  (a 


- r +-  m #*"•**- •*■  % vf*  a, % »' 
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value  of  0.05  is  presently  used)  and  for  simplicity  we  assume  it  will  divide 

T 

evenly  into  T so  that  on  dividing  = n.  The  value  of  n represents  the 
number  of  iterations  required  to  obtain  y(t).  (Non- integer  values  of  n can 

be  handled  in  the  actual  calculations.) 

Equation  (25)  is  , 


y (t+At)  = eAAty(t) 

Letting  t = 0 and  y(0)  = yg,  the  specified  initial  value  of  y(t) 

y(At)  = eAAtyQ  (27) 

aa  t* 

Thus,  with  e and  y^  known,  y(At)  may  be  obtained.  Then,  letting  y^ 

= y(At),  a value  for  y(2At)  can  be  obtained,  and  so  on  up  to  y(nAt). 

The  iteration  process  may  be  represented  as 

. AAt 
y (At)  = e yQ 

y(2At)  = e^SCAt) 

y (3At)  = eAAty(2At) 

y(nAt)  = e^^y  [ (n-l)At] 

and 


y(T)  = y(nAt) 


(28) 


which  gives  the  desired  state  probabilities  represented  by  the  vector  y. 


4.3  DETERMINATION  OF  RELIABILITY  AND 
AVAILABILITY  USING  THE 
STOCHASTIC  MATRIX 

Once  the  stochastic  matrix  has  been  derived,  availability  as  well  as 
reliability  can  be  obtained. 


4.3.1  Stochastic  Matrix  Derivation 

A configuration  with  two  identical  equipments  in  parallel  and  two 
repairmen  may  be  diagrammed  as 


-0=0- 


The  stochastic  matrix  for  such  a system,  shown  as  matrix  (2),  is  con- 
verted into  an  operational  form  by  subtracting  1 from  each  of  the  diagonal 
elements  and  transposing.  The  matrix  becomes 


(-2X  y 0 \ 

2 -(A+y)  2y  J 

0 X -2y  / 


(29) 


The  system  can  assume  three  states 

State  0 - Both  equipments  operational 

State  1 - One  equipment  operational,  one  equipment  failed 
State  2 - Both  equipments  failed 

Only  in  States  0 and  1 will  the  system  be  operational.  State  2 represents 
system  failure. 
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4.3.2  Calculation  of  Availiability 

In  calculating  the  state  probabilities  when  availability  is  desired, 
the  entire  stochastic  matrix  of  dimensions  3*3  is  used.  The  availability 
represents  the  sum  of  the  probabilities  of  all  up-states. 

Availability  = + P1  (us:*-n8  entire  stochastic 

matrix  of  dimension  n*n)  (30) 


4.3.3  Calculation  of  Reliability 

In  calculating  the  state  probabilities  when  reliability  is  desired, 
an  adjustment  in  the  stochastic  matrix  is  required.  If  NSF  represents  the 
number  of  up-states  (in  this  case  NSF  =2),  then  a new  2*2  matrix  consist- 
ing of  the  up-states  is  formed.  This  matrix  is 


derived  by  entering  zeros  in  the  last  column  of  the  original  stochastic 
matrix.  In  the  calculation  of  reliability,  transitions  from  down-states 
to  up-states  are  discarded.  This  rule  comes  from  the  definition  of  reli- 
ability, which  states  that  the  system  must  not  be  in  a down-state  during 
the  specified  time  interval.  Thus,  the  derivations  of  Elements  12  and  22 
in  matrices  (2)  and  (3)  were  not  required  for  the  computation  of  reliabili- 
ty. They  were  described,  since  they  are  required  in  the  availability  cal- 
culations. Since  only  Pq  and  are  required,  a 2*2  matrix  is  sufficient. 

Reliability  = Pq  + P1  (derived  from  NSF*NSF  up-state  matrix)  (32) 

4.3.4  Truncation  Error 

The  use  of  an  infinite  series  to  solve  the  set  of  differential  equa- 
tions for  the  state  probabilities  may  result  in  an  approximate  calculation. 
The  question  to  be  answered  is,  "How  much  of  an  approximation?" 
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As  the  number  of  terms  used  in  the  series  to  evaluate  the  quantity 
increases,  the  results  become  more  and  more  exact.  In  addition,  the 
size  of  the  increment  At  has  an  effect  on  the  accuracy  and  must  be 
considered. 

Investigators  at  Naval  Applied  Science  Laboratory  (NASL)  have  de- 
veloped equations  to  evaluate  the  truncation  error,  given  the  number  of 
terms  in  the  series  and  the  increment.  The  truncation  error  represents 
the  derivation  of  the  series  solution  from  the  exact  value.  For  instance, 
if  we  evaluate  the  series  to  the  nth  term  we  have 

AAt  z [Alj_  [_At3l  (33) 

j=0 

The  truncation  error  T would  be 


T - (34) 

j=n+l 


We  want  to  determine  T,  given  n and  At.  Equation  (35)  has  been  derived  by 
NASL  to  provide  an  upper  bound  for  T 


T e1*2 

1 (n+2) ! 


[1+  £3  S±n  (nX6)] 


(35) 


where  8 = YAAt 

Y = | | A | |,  the  magnitude  of  A 

A 

At  is  the  time  increment 
T is  the  truncation  error 

n is  the  number  of  terms  taken  in  the  series 
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Since  At  is  known  and  Y^  can  be  computed  from  the  derived  stochastic 

matrix,  the  truncation  error  can  be  found.  Conversely,  if  T is  specified, 

a combination  of  n and  At  can  be  found  to  satisfy  that  value. 

—8 

At  present  At  = 0.5  is  used  with  a maximum  error  of  10  allowed. 

—8 

Starting  with  n = 5,  n is  increased  until  T < 10  . If  T is  already  less 

-8 

than  10  when  n = 5,  five  terms  are  used  in  the  series. 


SECTION  5 

ANALYTIC  RELIABILITY  PREDICTION  USING  GEMJR 
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5.1  OVERVIEW 

GEM  is  a comprehensive  R/M  computer  model,  developed  at  NASL  and  im- 
plemented on  the  CDC  6700  at  DTNSFDC.  GEM  computes  various  elements  of 
R/M  from  complex  system  definitions.  Since  GEM  employs  a user-type 
language,  little  knowledge  of  the  computer  or  of  programming  is  required, 
and  the  program  is  well-suited  to  users  not  desiring  to  get  involved  in  the 
computer  aspects  of  R/M  calculations.  However,  because  the  user  orienta- 
tion of  GEM  necessitates  a large  computer  program  with  its  own  compiler 
and  function  library,  GEM  cannot  be  run  simultaneously  with  other  programs. 
Consequently,  a much  smaller  computer  program  that  would  compute  elements 
of  R/M  was  needed,'  and  GEMJR  was  developed  at  DTNSRDC.  This  program,  al- 
though not  user  oriented  as  GEM,  can  calculate  many  R/M  quantities  and  has 
been  used  to  investigate  the  feasibility  of  developing  small  but  compre- 
hensive versions  of  GEM  for  specific  applications. 

GEMJR  incorporates  the  Poisson  failure  process,  utilizing  the  theory 
developed  in  the  previous  section.  It  follows  the  lines  of  the  original 
GEM  program,  incorporating  similar  theory  and  calculations.  Because  of 
its  small  size,  GEMJR  can  be  readily  adapted  to  other  computer  programs. 
Although  GEMJR  was  developed  for  a specific  application,  a user  familiar 
with  the  basic  theory  can  construct  general  programs  (which  will  still  be 
relatively  small)  to  accommodate  various  system  configurations  and  missions. 
A description  and  listing  of  GEMJR  and  its  required  input  are  given  in 
Appendix  D. 

5.2  SAMPLE  PROBLEM 

GEMJR  was  constructed  to  calculate  reliability  and  availability  of 
the  system  configuration  described  in  Section  3.4.  The  reliability  block 
diagram  and  mission  scenarios  for  GEMJR  are  identical  to  those  given  in 
Figure  3. 

The  block  diagrams  in  the  problem  are  straightforward;  however,  the 
specification  of  two  levels  of  operation  during  the  mission  complicates 


the  reliability  calculations.  Each  level  of  operation  is  associated  with 
a different  block  diagram.  Thus,  when  the  level  of  operation  changes,  the 
block  diagram  changes.  Each  block  diagram  requires  a different  stochastic 
matrix.  To  compute  reliability  from  a block  diagram  with  changes  in  level 
of  operation,  the  concept  of  interval  reliability  (i.e.,  reliability  com- 
puted for  a specific  time  interval)  must  be  used  to  retain  continuity  of 
system  states. 

5.3  SYSTEM  DEFINITION 
5.3.1  Independence 

If  the  concept  of  independence  is  assumed,  the  block  diagram  in 
Figure  3 can  be  partitioned  to  simplify  the  problem.  The  configuration  can 
be  divided  into  a series  of  smaller  units  called  stages*  which  are  simpler 
to  handle  than  the  entire  configuration  as  a whole.  The  assumption  of  in- 
dependence places  certain  restrictions  on  the  problem.  However,  these  re- 
strictions are  minor  compared  to  benefits  realized  in  the  form  of  reduced 
effort  to  solve  the  problem. 

To  illustrate  the  concept  of  independence  and  the  simplification  ob- 
tained, the  system  states  are  described.  When  the  Poisson  process  is  used, 
the  stochastic  matrix  is  of  dimension  N*N,  where  N is  the  total  number  of 
states  in  the  system.  If  M represents  the  number  of  different  equipments 
in  the  block  diagram,  then 

N>  2M 

M 

When  all  equipments  in  the  system  are  different,  N = 2 ; otherwise  the 
inequality  holds,  i.e.,  at  least  two  equipments  are  similar.  The  total 
number  of  states  decreases  when  more  equipments  are  similar. 

A look  at  Level  1 of  the  block  diagram  in  Figure  3 shows  that  M = 9 
so  that 

N = 29  = 512 


*The  stages  are  the  same  as  the  blocks  defined  in  Figure  3. 
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Thus,  a 512*512  stochastic  matrix  is  needed  to  compute  the  reliability. 

If  the  configuration  is  divided  into  the  four  stages  indicated,  the  largest 
matrix  required  is  32*32  (i.e.,  32  = 2"*),  the  size  needed  for  Stage  1,  Level 
2,  with  5 different  pieces  of  equipment.  Under  the  concept  of  independ- 
ence, each  stage  is  assumed  independent  of  the  others,  i.e.,  all  R/M 
quantities  are  computed  separately  for  each  stage,  and  each  has  its  own 
repairman  and  standby  equipment  when  applicable;  there  is  no  sharing  be- 
tween stages.  The  four  stages  are  solved  independently. 

Complicated  problems  can  be  simplified  by  invoking  independence. 
However,  care  must  be  taken  to  avoid  distorting  the  problem  by  assuming  an 
independence  that  does  not  apply. 

5.3.2  System  Configuration 

All  series  equipments  can  be  treated  alike,  whether  or  not  repairs 
are  made,  for  the  system  fails  when  any  series  equipment  fails.  Even  if 
repairs  are  allowed,  the  system  will  be  down  during  the  repair  period  and 
the  mission  will  be  aborted.  Consequently,  the  reliability  of  Stage  4, 
which  consists  only  of  series  equipments,  can  be  computed  from  the  fol- 
lowing standard  formula  for  reliability 

Reliability  = e"Xt  (36) 

where  A is  the  failure  rate  and  t is  the  failure  time. 

Equation  (36)  makes  no  assumptions  or  approximations.  The  reliabili- 
ty of  these  series  equipments  is  independent  of  the  number  of  repairmen 
assigned  to  them.  The  mission  specifies  up-state  for  Equipments  3,  4,  5, 

6,  and  7.  Because  of  the  group  reference  to  these  equipments,  in  the 
mission  we  refer  to  Equipments  3,  4,  and  5 as  Stage  2,  and  Equipments  6 
and  7 as  Stage  3.  Since  Stages  2 and  3 are  independent  of  each  other, 
repairmen  cannot  be  shared.  Only  the  equipment  configuration  of  Stage  1 
changed  during  the  mission. 

The  assumption  of  independence  permits  each  stage  to  be  identified 
with  a simpler  stochastic  matrix.  Stage  1 has  a 5*5  matrix,  Stage  2 a 4*4 
matrix,  and  Stage  3 a 3*3  matrix. 
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M 

If  there  are  M different  equipments  in  a stage,  then  2 different 

states  are  possible.  If  some  or  all  of  the  equipments  are  identical,  fewer 
M 

than  2 states  exist.  As  seen  in  Figure  3,  both  Stages  2 and  3 are  com- 
posed of  identical  items  within  the  stage,  so  the  two  stages  have  fewer 
M 

than  2 states. 

Stages  2 and  3 could  have  been  treated  as  a single  stage  consisting  of 
five  pieces  of  equipment.  This  expanded  stage  would  have  involved  a total 
of  12  different  states,  resulting  in  a more  complicated  derivation  of  the 
stochastic  matrix.  At  the  same  time,  however,  such  .in  expanded  stage 
would  have  added  flexibility  by  allowing  the  sharing  of  repairmen  over 
these  five  equipments  as  a group. 

The  configurations  of  Stages  2 through  4 are  the  same  in  the  different 
phases  so  the  same  expression  for  computing  their  reliabilities  holds 
throughout  the  mission.  The  configuration  of  Stage  1 changes  during  the 
mission,  however,  as  Phase  1 of  Stage  1 is  composed  of  five  equipments. 
Phase  2 of  two  equipments,  and  Phase  3 of  five  equipments.  This  configu- 
ration change  alters  the  stochastic  matrix  so,  instead  of  using  the  stand- 
ard reliability  expression  (see  Section  5.5),  the  concept  of  interval  reli- 
ability must  be  introduced  to  compute  the  reliability  in  Phases  2 and  3. 
Although  Stage  1 contains  only  two  equipments  during  Phase  2,  it  is  assumed 
to  contain  (for  calculation  purposes  only)  five  different  equipments  at  all 
times,  for  a total  of  32  possible  states. 

Because  the  stages  are  independent,  their  reliabilities,  which  are 
obtained  separately,  must  be  multiplied  together  to  get  the  reliability  of 
the  total  system  during  that  phase.  The  reliability  and  availability  for 
the  entire  mission  are  obtained  by  multiplying  the  reliability  and  avail- 
ability of  the  different  phases  together. 
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5.4  STAGE  1 CONFIGURATION 


Stage  1 can  be  represented  by  the  following  diagram 


Each  equipment  is  numbered  and  has  associated  with  it  failure  rates, 
X^,  X 2 ...  X,.  and  repair  rates  y^,  •••  The  number  of  states  in  the 

stage  is  2^  = 32,  as  listed  in  Table  1.  The  32  states  describe  all  the 
possible  conditions  of  Stage  1 composed  of  equipments  1,  2,  3,  4,  and  5. 
These  equipment  numbers  are  different  from  those  in  Figure  3 but  are  used 
for  simplicity.  In  each  state  each  equipment  can  be  either  up,  i.e.,  opera 
tive,  or  down,  i.e.,  failed.  An  equipment  number  without  a bar  indicates 
that  the  equipment  is  operational;  an  equipment  number  with  a bar  indicates 
that  the  equipment  has  failed.  The  configuration  represents  a type  of 
redundancy  in  that  the  up-state,  representing  non-failure  of  the  system, 
requires  that  either  equipments  1 and  2 are  operative  or  that  equipments 
3,  4,  and  5 are  operative,  but  not  both  sets  at  once.  States  0 to  10 
represent  up-states  and  the  rest  down-states.  The  non-zero  elements  of  the 
entire  stochastic  matrix  are  given  in  Table  2.  To  compute  reliability 
with  repair,  only  the  up-states  are  considered.  To  compute  interval  reli- 
ability and  availability,  all  the  stages  in  the  stochastic  matrix  must  be 
considered. 

5.5  R/M  DEFINITIONS 

In  this  section  the  terms  reliability,  availability,  and  interval 
reliability  will  be  defined  with  respect  to  the  stochastic  matrix,  state 
probabilities,  and  number  of  up-states. 
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TABLE  1 - POSSIBLE  STATES  FOR  STAGE  1 


State 


Configuration 
12345 
12345 
12345 
12345  ! 

12345 
12345 
12345 
12345 
12345 
12345 
12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345  | 

12345 

12345 

12345 

12345 

12345 


Up-states 


Down-states 
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TABLE  2 - NON-ZERO  ELEMENTS  FOR  STAGE  1 STOCHASTIC  MATRIX 
TABLE  2A  - DIAGONAL  ELEMENTS 


Transition 

Element 

Transition 

Element 

0,0 

1 - (X^+X2+X^+X^+X^) 

16,16 

1 - (X3+X3+X4+y2+y5) 

1,1 

1 - (X2+X3+X^+X5+y1) 

17,17 

1 - ( X 4+X  5+y  3+y  2+y  3 ) 

2,2 

1 - ( X i+X  3+X  4+X  5+y  2 ) 

18,18 

1 - ( x 3+x  5+y  3+y  2+y  4 ) 

3,3 

1 ~ ( X 3+ A ^+X 5+(j -j+U 2 ^ 

19,19 

1 - (X3+XA+y]+y2+y5) 

4,4 

1 ~ ( X i+X  2+X4+X  5+P  3 ) 

20,20 

1 - (X2+X5+y1+y3+y4) 

5,5 

1 - (X1+X2+X3+X5+|j^) 

21,21 

1 - (X1+x5+y2+y 3+y 4 ) 

6,6 

1 - (X^+X2+X3+X^+y3) 

22,22 

1 - ( x 2+x  3+y 3+y  4+y 3 ) 

7,7 

1 - ( X 3+X  2+X  3+113+1^) 

23,23 

1 - ( Xj+x  3+y  2+y 4+y 5 ) 

8,8 

1 - (X1+X2+X3+UZ(+m5) 

24,24 

1 - (X2+x4+y1+y3+y5) 

9,9 

1 - (X1+X2+X/,+ii3+y5) 

25,25 

1 - ( X 3+X  4+y  2+y  3+y  3 ) 

10,10 

1 - ( X 3^-l-X  2+lJ  3+VJ4'f‘L|  5 ) 

26,26 

1 - (X2+y3+y3+y4+y5) 

11,11 

1 - (X2+XZt+X5+y1+y3) 

27,27 

1 - ( X 3+y  2+y  3+y  4+y  5 ) 

12,12 

1 - (X2+X3+X5+y1+ii(i) 

28,28 

1 - (X3+y3+y2+y4+y5) 

13,13 

1 - (X2+x3+x4+y1+y5) 

29,29 

1 - ( x4+y  3+y  2+y  3+y  5 ) 

14,14 

1 - (X3+X4+X5+y2+y3) 

30,30 

1 - (X5+y3+y2+y3+P4) 

15,15 

1 - (X3+X3+X5+y2+y4) 

31,31 

1 - (u3+y2+y 3+y 4+y 5 > 

Note:  Under  Transition  first  value  is  initial 

state,  second  value 

is  final  state. 

TABLE  2 (Continued) 

TABLE  2B  - NON-DIAGONAL  ELEMENTS 


5.5.1  Reliability 

A system  is  assumed  to  be  in  an  up-state  at  the  start  of  the  mission, 
t = 0.  The  reliability  at  any  time  t (greater  than  t = 0)  is  defined  as  • 
the  probability  that  the  system  will  not  fail  up  to  that  time,  t.  During 
the  time  period  t = 0 to  t,  redundant  equipments  can  be  repaired.  Since 
reliability  is  the  probability  that  the  system  will  remain  in  an  up- state 
(will  not  fail),  transitions  from  up-states  to  down-states  (system  failure) 
are  not  allowed  in  the  calculations.  Therefore,  only  the  abbreviated  up- 
state version  of  the  stochastic  matrix  is  considered.  From  the  up-state 
matrix,  the  state  probabilities  (for  only  the  up-states)  over  the  first 
phase  can  be  computed.  The  initial  state  probabilities  at  t = 0 are 
specified  as  P(l)*  = 1,  and  the  rest,  P(2)  to  P(ll),  zero,  signifying  that 
the  system  is  fully  up  at  t = 0.  The  state  probabilities  over  Phase  2 are 
computed  with  respect  to  the  new  initial  state  probabilities,  which  are  the 
state  probabilities  computed  over  Phase  1.  Finally,  state  probabilities 
over  Phase  3 are  computed  with  respect  to  those  from  Phase  2.  The  up-state 
probabilities  computed  over  Phase  3 (remember,  they  are  a function  of  the 
state  probabilities  at  Phases  1 and  2)  are  added  to  give  the  reliability 
for  the  mission,  the  probability  that  the  system  will  be  in  an  up-state 


condition. 

5.5.2  Availability 

If  the  system  is  assumed  to  be  up  at  t = 0,  the  availability  is  defined 
as  the  probability  that  the  system  will  be  up  at  any  time  t greater  than 
t = 0.  The  system  could  have  failed  and  been  restored  many  times  in  the 
interval  (0,t),  but  the  important  consideration  is  the  state  of  the  system 
at  time  t. 

Since  the  availability  is  a function  of  the  time  that  the  system  is 
in  both  states  (for  the  system  can  enter  an  up-state  from  a down-state  and 
conversely),  the  entire  stochastic  matrix  must  be  used  in  calculations. 
Therefore,  all  the  state  probabilities  must  be  calculated  to  obtain  the 


*P(1)  represents  the  probability  that  the  system  will  be  in  State  0, 
similarly  P(2)  represents  the  probability  that  the  system  will  be  in  State 
1 and  so  on. 


availability.  The  state  probabilities  over  each  phase  are  calculated  as  a 
function  of  the  initial  probabilities  for  that  phase.  The  initial  proba- 
bility for  other  than  the  first  phase  is  the  final  probability  of  the  pre- 
ceding phase.  All  the  state  probabilities  at  the  end  of  Phase  3 are  added 
to  give  the  availability. 


5.5.3  Interval  Reliability 

It  is  assumed  that  the  system  is  completely  operational  at  t = 0 and 
that,  in  the  interval  from  t = 0 to  t^,  system  failures  and  repairs  can 
take  place.  But,  during  the  interval  t^  to  t2»  only  redundant  items  can 
be  repaired  if  they  fail.  The  interval  reliability  R(t^,t2)  of  a system 
is  defined  as  the  joint  probability  that  the  system  will  be  up  at  time  t^ 
and  remain  up  until  time  t2  which  is  greater  than  t^.  The  concepts  of  both 
availability  from  0 to  t^  and  reliability  from  t^  to  t2  are  involved. 

To  calculate  the  interval  reliability  the  entire  stochastic 

matrix  must  be  used  to  obtain  all  the  state  probabilities  over  the  interval 
[0,tj].  Then  only  the  up-state  probabilities  are  used  to  compute  the 
interval  reliability  over 

5.6  CALCULATION  OF  RELIABILITY  AND 
AVAILABILITY  OF  STAGE  1 

5.6.1  Phase  1 

To  calculate  reliability  and  availability  for  Stage  1,  the  following 
quantities  are  used: 


Variables 


Definitions 

Stochastic  matrix  dimensioned  32x32 

Up-state  stochastic  matrix  of  dimension  llxll 

Column  vector  of  state  probabilities  at  t = 0 
(Initial  conditions) 

(PQ(t),  P1(t)  . . . P31(t)),  Column  vector  of  all  state 


P'(t) 


probabilities  at  time  t (32  elements) 

Column  vector  of  up-state  probabilities  (11  elements) 
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At 


Time  increment 

Time  at  end  of  Phase  1 


n!  ^ * number  of  iterations  required  for  first  phase 

To  obtain  the  state  probabilities  at  the  end  of  Phase  1,  n^^  iterations 
are  necessary.  The  stochastic  matrix  for  Stage  1 is  given  in  Table  2.  As 
shown  in  Equation  (26) , the  following  operations  are  required 


P (At)  = eAAtP(0) 


P(2At)  = eMtP(At) 


P(tx)  = P (n^At)  = eAAtP((n-l)At) 


Each  line  or  iteration  represents  a matrix  multiplication.  The  state 
probabilities  are  represented  by  a column  vector  and  e^t  is  a square 
matrix  so  that  multiplying  a matrix  by  a column  vector  results  in  a column 
vector,  i.e.,  the  new  state  probabilities.  After  ^ iterations,  the  state 
probabilities  are  known  at  t and  by  combining  them  we  get  availability. 


Availability  = z w 


If  the  same  procedure  is  followed  and  Matrix  A is  replaced  with 
Matrix  A'  in  Equation  (37),  we  obtain  reliability  by  summing  the  up-state 
probabilities. 


P ’ (At)  = eA'AtP(0) 

P'(2At)  = eA’AtP'(At) 

= P (OjAt)  = e^P’^-DAt) 


From  P'  and  A'  in  the  iteration  Equation  (37)  and  the  up-state  probabili- 
ties at  t^  (column  vector),  P'  can  be  determined.  The  reliability  at  t^ 
is  determined  by  summing  the  elements  of  vector  P'. 

10 

Reliability  = z P[(tL)  (39) 

i=0 

These  calculations  are  used  for  the  first  phase  of  the  mission.  The 
configuration  change  of  Phase  2 requires  the  calculation  of  interval  reli- 
ability as  described  in  the  next  section. 

5.6.2  Phase  2 

The  configuration  change  from  Phase  1 to  Phase  2 makes  it  necessary 
to  compute  interval  reliability;  two  changes  must  be  made  in  the  calcula- 
tions as  performed  for  Phase  1. 

The  configuration  change  during  the  phase  change  results  in  a change 

in  the  number  of  up-states,  causing  an  alteration  in  the  stochastic  matrix. 

In  Stage  1,  the  Phase  1 configuration  consists  of  five  equipments.  The 

Phase  2 configuration  consists  of  only  two.  Thus,  there  has  been  an  actual 

5 2 

decrease  in  the  number  of  possible  states  from  2 to  2 . However,  use  of 
the  Poisson  process  requires  that  the  number  of  possible  states  remain 
constant  throughout  the  mission.  Consequently,  we  must  assume  that  there 


I 


are  five  equipments  in  Phase  2,  even  though  only  two  equipments  exist. 
Only  the  following  eight  states,  which  reflect  the  probability  that  both 
Equipments  1 and  2 are  up,  are  considered  in  the  reliability  calculation. 


12345 

12345 

12345 

12345 

12345 

12345 

12345 

12345 

By  specifying  these  up-states  and  eliminating  up-states  12345,  12345,  and 
12345  from  Phase  2,  we  imply  that  the  failures  of  only  equipments  1 and  2 
affect  the  reliability.  Although  the  configuration  has  not  changed 
physically,  we  have  arranged  the  calculations  so  that  the  configuration 
actually  consists  of  only  two  equipments  in  series. 

The  mathematical  procedures  used  require  that  the  down-states  follow 
the  up-states  in  the  original  stochastic  matrix.  Therefore  the  original 
stochastic  matrix  must  be  rearranged  so  that  the  first  eight  rows  contain 
the  up-states  specified. 

The  second  change,  necessitated  by  the  configuration  change  involves 
the  calculation  of  interval  reliability. 

At  the  beginning  of  the  mission,  t = 0,  initial  values  for  the  state 

31 

probabilities  are  specified  as  Pq(0)  = 1,  z P^(0)  = 0.  The  32  proba- 

i=l 

bilities  are  computed  at  the  end  of  Phase  1,  using  the  total  stochastic 
matrix,  and  the  availability  is  computed.  These  probabilities  become  the 
initial  values  of  the  state  probabilities  for  computing  both  availability 
and  reliability  during  Phase  2.  The  availability  is  computed  using  the 
rearranged  total  stochastic  matrix  with  all  32  initial  values.  The 
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reliability  is  computed  using  the  abbreviated  and  rearranged  stochastic 
matrix  (8x8  matrix  consisting  only  of  up-states)  with  the  first  eight 
initial  values  being  those  for  the  state  probabilities.  When  computing 
reliability  with  repair,  the  initial  values  of  the  reliability  calculations 
are  obtained  from  the  previous  reliability  calculation  (last  phase).  How- 
ever, because  we  are  calculating  interval  reliability,  the  initial  values 
are  obtained  from  the  preceding  availability  calculations.  Also,  the  re- 
sulting interval  reliability  is  the  reliability  for  the  specified  interval 
phase  only.  To  obtain  the  reliability  through  Phase  2,  the  reliability  of 
Phase  1 must  be  multiplied  by  the  interval  reliability  for  Phase  2.  The 
same  process  is  used  again  to  compute  the  interval  reliability  over  Phase  3. 
The  original  stochastic  matrix  is  used  because  the  configuration  reverts 
to  the  original  configuration  of  Phase  1. 

5.7  CALCULATION  OF  RELIABILITY  FOR 

STAGES  2,  3,  AND  4 

An  analysis  similar  to  that  used  for  Stage  1 is  used  for  Stages  2 and 
3,  the  only  difference  being  in  the  derivation  of  the  stochastic  matrix. 

For  these  stages,  reliability  with  repair  is  calculated  throughout  the 
mission  using  the  straightforward  iteration  process  described  in  the  last 
section. 

The  configuration  of  Stage  2,  consisting  of  three  identical  equipments 
arranged  in  parallel,  is 


Reliability  = P^(t)  + P|(t)  (42) 

MV  ■ • ■ 

! » 

[ 

The  up-state  2x2  matrix  used  to  compute  reliability  is 


t 


The  configuration  of  Stage  3 consists  of  two  identical  equipments 
arranged  in  parallel 


A repairman  is  assigned  to  each  equipment.  The  states  possible  are 


State 

0 

1 

2 

The  stochastic  matrix  is 


Description 

All  equipments  operational 
One  equipment  operational 
All  equipments  fail 


(1-2  A 2 A 0 \ 

y i-a+y)  a ) 

0 2y  l-2y  / 

Since  the  up-state  rules  specify  that  one  of  two  equipments  must  be 
up  for  operation.  States  0 and  1 are  up-states  and  the  following  notation 
applies 


Availability  = PQ(t)  + P^Ct) 


Reliability  = P^(t)  + P|(t) 


The  configuration  of  Stage  4 consists  of  two  different  equipments 
arranged  in  series 


The  simple  expression  for  two  identical  equipments  in  series,  Equa- 
tion (12),  can  be  applied  to  compute  the  reliability  of  Stage  4. 


n . , , . * , — Xt  — Xt  — 2 X t 

Reliability  = e • e = e 


(12) 


Since  Stage  4 contains  two  different  equipments,  Equation  (12)  becomes 


-X  t -X  t 
Reliability  = e • e 


(45) 


-(X^X^t 


(46) 


5.8  CALCULATION  OF  RELIABILITY  FOR 
TOTAL  SYSTEM 

The  reliability  and  availability  for  each  phase  and  each  stage,  and 
thus  for  the  total  mission,  can  be  calculated.  We  shall  outline  the  pro- 
cedure for  obtaining  the  reliability  of  the  total  system. 

To  obtain  the  reliability  (R)  for  Stages  2 and  3,  and  R^,  respec- 

C2 

tively,  we  use  their  stochastic  matrices,  perform  ^ iterations,  and  sum 
the  up-state  probabilities  at  t 

Stage  1 is  complicated  by  the  configuration  change  in  Phase  2.  The 

C1 

state  probabilities  at  the  end  of  Phase  1,  t = t^,  obtained  through 
iterations,  are  called  R^.  For  Phase  2,  we  use  the  concept  of  interval 

t2-tl 

reliability.  The  state  probabilities  at  t = t^  are  obtained  after  — ^ — 
iterations.  Summing  the  up-states  gives  the  interval  reliability  (IR) 
over  phase  2,  which  is  IR^^^).  The  reliability  for  Stage  1 up 

through  is 

R1  = Rll(tl)  * IR(t1t2)  (47) 
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SECTION  6 

COMPARISON  OF  R/M  PREDICTION  METHODS 


Both  the  simulation  and  analytic  reliability  prediction  methods  have 
advantages  and  disadvantages  so  that  the  choice  of  the  best  program  for  a 
given  situation  is  not  obvious.  The  characteristics  of  the  two  programs 
are  compared  so  that  the  user  can  make  an  informed  decision. 

6.1  SIMULATION  METHOD 

Before  the  reliability  of  a system  can  be  calculated,  a block  diagram 
of  the  system  must  be  constructed  and  the  appropriate  data  obtained.  SIM3 
uses  Monte  Carlo  techniques  to  simulate  the  operation  of  a system.  The 
possible  outcomes  of  such  a simulated  mission  are  mission  success  or  mission 
abort.  To  calculate  the  reliability  of  the  system,  many  missions  must  be 
simulated. 

The  reliability  is  computed  stochastically  as  the  number  of  successful 
missions  is  divided  by  the  total  number  of  missions.  Since  a prediction 
based  on  simulation  is  nondeterministic,  the  results  of  each  computer  run 
will  be  somewhat  different.  However,  as  more  missions  are  simulated,  the 
statistical  prediction  should  approach  that  obtained  from  analytic  (or 
deterministic)  methods. 

6.1.1  Advantages 

The  nature  of  the  simulation  process  allows  some  highly  complicated 
applications  to  be  solved  with  relative  ease. 

First,  SIM3  records  the  number  of  times  each  piece  of  equipment  fails. 
These  results  are  tabulated  separately  for  each  simulated  mission  and  any 
equipment  with  a high  failure  record  can  be  identified.  Steps  can  be  taken 
to  improve  the  performance  of  the  equipment  and  thus  increase  system 
reliability. 

Second,  SIM3  can  handle  system  configuration  changes  more  easily  than 
can  the  analytic  method  since  interval  reliability  is  more  easily 
calculated. 


55 


- j + * ' v -v  * 


Finally,  SIM3  provides  for  the  specification  of  allowable  sustained 
downtime.  When  a subsystem  (or  the  entire  system)  fails  and  is  down  for  a 
time  less  than  the  sustained  downtime  the  abort  criteria  are  not  violated. 
This  feature  is  not  incorporated  in  analytic  methods. 

6.1.2  Disadvantages 

The  statistical  nature  of  simulation  means  that  final  results  are  ob- 
tained by  averaging.  (It  is  possible  to  predict  the  actual  number  of 
mission  simulations  required  to  satisfy  a given  confidence  limit.)  As  the 
system  gets  larger  and  more  equipments  are  added,  each  simulated  mission 
requires  more  computer  time  to  run,  and  simulation  of  large  systems  can 
become  quite  expensive. 

Another  shortcoming  of  SIM3  is  that  it  does  not  compute  time-dependent 
availability,  although  steady-state  availability  can  be  computed.  Also, 
simulation  predictions  are  generally  not  as  flexible  as  analytic  methods 
in  the  consideration  of  the  several  aspects  of  maintainability;  repairmen, 
standbys,  redundancies,  and  spare  parts  cannot  easily  be  considered. 

Finally,  the  statistical  results  of  simulation  are  not  as  exact  as 
analytical  results.  The  simulation  prediction  results  approach  the  exact 
results  as  the  number  of  simulated  missions  increases,  but  in  some  cases  it 
is  impractical  to  run  enough  missions  to  achieve  desired  accuracy.  Thus 
the  results  usually  deviate  from  the  actual  value  by  a few  percent. 

6.2  ANALYTIC  METHOD 

The  theory  of  analytic  prediction  is  covered  in  detail  in  Section  4. 
The  Poisson  failure  process  is  used  to  develop  stochastic  matrices  from 
which  a set  of  simultaneous  differential  equations  is  generated.  Solving 
these  equations  gives  a one-dimensional  array  whose  elements  are  the  state 
probabilities.  The  more  equipment  to  be  considered,  the  greater  the  number 
of  states  and  thus  the  greater  the  number  of  calculations  involved. 


6.2.1  Advantages 

An  analytic  prediction  is  deterministic  in  that  the  results  are  always 
the  same  providing  the  input  has  not  changed.  There  is  no  variation  in  the 
prediction  as  there  is  with  simulation  programs.  Because  of  this  exactness 
in  results,  an  analytic  process  can  be  used  when  small  changes  in  parameters 
are  required.  For  instance,  assume  we  want  to  observe  the  effect  of  adding 
additional  redundant  equipment  in  a configuration.  Because  our  analytic 
prediction  is  exact,  even  small  changes  will  usually  be  reflected  in  the 
answer.  With  the  simulation  prediction,  such  small  changes  might  be  in- 
distinguishable from  the  normal  variation  in  the  results. 

The  primary  input  in  an  analytic  prediction  is  the  stochastic  matrix. 
Once  it  is  derived,  the  remaining  calculations  are  routine.  Many  different 
aspects  of  maintenance  can  be  incorporated  by  altering  various  elements  of 
the  stochastic  matrix.  Thus,  repairmen  and  standby  equipment  can  easily  be 
considered.  In  addition,  variations  in  the  number  of  repairmen  and  standby 
equipment  can  be  made,  enabling  tradeoffs  with  system  maintenance  cost 
and  reliability. 


6.2.2  Disadvantages  

Because  all  the  states  that  a system  can  assume  must  be  identified  in 
the  analytic  method,  the  size  of  the  system  for  which  reliability  and  avail- 
ability are  calculated  is  limited.  The  number  of  different  states  that  a 

system  can  assume  (as  reflected  by  the  dimensions  of  the  stochastic  matrix) 

N 

is  represented  by  2 , where  N is  the  number  of  different  pieces  of  equip- 
ment. If  N = 5,  the  number  of  states  possible  is  2^  = 32,  and  the  associ- 
ated stochastic  matrix  would  be  dimensioned  at  32  by  32.  The  derivation 
of  this  matrix  is  not  a simple  task.  One  can  imagine  the  work  required  when 
N is  even  larger.  Thus  the  subsystems  must  be  kept  to  a "reasonable"  size 
to  keep  the  volume  of  calculations  down.  If  N is  unmanagably  large,  other 
methods  which  may  include  simulation  programs,  must  be  used. 

The  failure-prone  items  can  be  more  easily  identified  using  simulation 
methods.  Furthermore,  situations  involving  complicated  mission  scenarios, 
numerous  configuration  changes,  and  many  operational  levels  are  not 
amenable  to  analytic  solutions. 
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6.3  COMPARISON  OF  SIM3  AND  GEMJR  RESULTS 

Sample  runs  of  the  configuration  pictured  in  Figure  3 were  made  with 
SIM3  and  GEMJR.  The  results  are  shown  in  Table  3.  The  average  deviation 
of  the  results  for  all  three  phases  was  1.4  percent. 


TABLE  3 - SIM3  AND  GEMJR  RESULTS 


Run 

Characteristics 

Reliability 

System 

Seconds 

Average 

Weighted 

Core 

Phase  1 

Phase  2 

Phase  3 

Estimated 
$ Cost 

SIM3 

0.926 

0.746 

0.590 

31 

19752 

5.50 

GEMJR 

0.925 

0.759 

0.605 

142 

19074 

21.24 

Notes: 

System  Seconds  = Computer  central  processing  and  input/ 
output  time. 

Average  Weighted  Core  = Average  computer  word  memory  in 
decimal  units. 

Estimated  $ Cost  = Projected  cost  of  the  run  (based  on 
system  seconds). 


The  results  in  Table  3 show  that  the  computer  memory  requirements  of 
the  two  programs  are  similar.  However,  GEMJR  required  more  than  four  times 
the  computer  time  of  SIM3  at  nearly  four  times  the  cost.  Thus  when  cost 
and  time  become  factors  in  running  the  programs  (especially  with  large  re- 
liability configurations),  SIM3  will  be  preferred.  However,  before  a final 
choice  is  made,  other  advantages  and  disadvantages  should  be  reviewed. 


APPENDIX  A 

EXAMPLE  OF  A TRADEOFF  ANALYSIS  USING  SIM3 


A hypothetical  system  is  used  to  illustrate  the  integration  of  main- 
tainability with  optimization.  The  total  system  cost,  consisting  of  both 
equipment  and  maintenance  costs,  will  be  optimized  (i.e.,  minimized)  by 
varying  the  configuration  of  the  system. 

1.0  OVERVIEW 

In  this  hypothetical  application  SIM3  is  used  to  generate  equipment 
failures  in  the  system.  Each  failure  requires  a corrective  (or  unscheduled) 
maintenance  (CM)  action,  with  a specific  cost  involved.  Preventive  (or 
scheduled)  maintenance  (PM)  actions  are  generated  at  a fixed  rate  and  the 
cost  of  each  action  is  determined.  The  inclusion  of  PM  effectively  in- 
creases the  MTBF  of  each  equipment,  decreasing  the  chance  of  failures  (cor- 
rective maintenance  requirements).  There  is  a tradeoff  between  cost  in- 
vested in  PM  and  costs  incurred  in  CM,  for  increased  PM  costs  can  decrease 
CM  costs.  Although  not  performed  in  this  analysis,  such  a tradeoff  could 
have  been  made  to  determine  the  minimum  cost  of  both  PM  and  CM  actions. 

2.0  METHOD 

The  following  example  illustrates  the  method  of  minimizing  system 
costs.  An  optimization  procedure  is  used  to  allocate  equipment  in  the 
configuration. 

Let  C..  = maintenance  cost  of  system 
M 

N = number  of  maintenance  actions  required  for  ith  equipment 
Ai 

C = maintenance  cost  for  ith  equipment 
Ai 

N = total  number  of  equipments  in  the  system 
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The  expression  for  the  maintenance  costs  of  the  system  is 


N 

c"  ' £ \ \ 

We  can  determine  the  effects  on  the  maintenance  cost  of  adding  items 
in  parallel  or  in  series,  and  the  effect  of  operating  the  system  under 
different  up-state  rules,  i.e.,  in  a redundant  configuration  specifying 
how  many  equipments  are  required  for  the  system  to  be  in  operation. 

Let  system  X contain  initially  the  different  equipments  A,  B,  and  C 


From  this  initial  or  baseline  configuration  we  shall  derive  an  optimal 
configuration  for  minimizing  total  cost  by  varying  the  number  of  equipments 
in  the  configuration. 

Let  CA  = cost  of  equipment  A 

CD  = cost  of  equipment  B 

D 

Cc  = cost  of  equipment  C 

= total  cost  of  maintenance  actions 

C„.  = cost  of  maintenance  action  on  A 
MA 

CMg  = cost  of  maintenance  action  on  B 
CM(,  = cost  of  maintenance  action  on  C 
Cp  = cost  of  preventive  maintenance  actions 


CgT  = total  system  cost 


nA 

s 

number 

of 

items  of  A 

<nA)0 

= 1 

’ (n^Q  represents* 

nB 

= 

number 

of 

items  B 

(nB}0 

= 2 

the  initial 

nc 

= 

number 

of 

items  C 

*nc*o 

= 1 

.configuration 

na 

= 

number 

of 

maintenance 

actions 

on  A 

nb 

= 

number 

of 

maintenance 

actions 

on  B 

Nc 

s 

number 

of 

maintenance 

actions 

on  C 

In  the  case  of  redundancies,  the  N's  represent  the  total  maintenance 
actions  for  all  redundant  items. 

The  cost  of  the  equipment  in  system  X is 


CS  = 


nACA  + nBCB  + nCCC 


The  maintenance  cost  due  to  repairs  is 


Si 


= nacma  + 


nbcmb  + nacmc 


N , N , and  N are  obtained  from  the  simulation  program  SIM3  and  n. , n„. 
Ad  L A B 

and  nc  are  the  variables  in  the  allocation  optimization  method.  As  indi- 
cated in  the  baseline  configuration  the  initial  values  are 


nA  “ 1*  nB  = 2»  and  nC  = 1 

The  objective  is  to  minimize  total  system  cost,  CgT  by  varying  the  n's 

where 

CST  = CM  + CS  + CP 


and  Cp  is  the  cost  of  preventive  maintenance  which  occurs  at  a specified 
rate. 
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If  Ra  is  the  reliability  of  item  A,  Rfi  for  B,  and  Rc  for  C,  then  the 
reliability  without  repair  of  the  system  is  given  by  the  expression 


R = U-(i-RA)  a][i-(i-rb)  b] [i-(i-Rc)nc] 


with  the  constraint  n. , nD,  n„  > 1. 

A B L — 

This  expression  considers  n redundancies  for  item  A,  nD  for  B,  and 

A B 

nc  for  C.  In  the  case  of  reliability  with  repair  a closed  expression  with 
repair  cannot  be  computed. 

At  this  point,  expressions  for  the  total  cost  of  the  system,  C , and 

u 1 

for  the  reliability,  R,  have  been  derived.  The  optimization  process  used 
when  nA>  nB>  and  n£  are  varied  will  depend  on  whether  the  objective  of  the 
analysis  is  to 

a.  Minimize  C 

b 1 

b.  Maximize  R,  or 

c.  Maximize  R with  a constraint  on  C„ 

b A 

In  (a),  where  CgT  is  minimized,  the  reliability  of  the  system  might 
become  unacceptably  low.  In  (b) , as  the  R is  maximized,  the  cost  of  the 
system  can  get  unacceptably  high.  However,  if  R is  required  at  a specific 
level  regardless  of  cost,  then  (b)  is  used.  Generally  (c)  provides  a 
moderate  approach  to  system  design.  Reliability  is  maximized  within  a 
specific  cost  constraint.  Various  values  can  be  substituted  for  the  cost 
constraint  to  obtain  the  variation  of  reliability  with  cost.  If  values  of 
the  reliability  are  too  low  within  the  range  of  acceptable  costs,  the 
designs  of  the  system  will  have  to  be  reevaluated. 

To  illustrate  how  the  consideration  of  a weight  constraint  in  the 
optimization  of  a configuration  would  be  taken  into  account,  let  us  return 
to  our  prior  example. 

Representing  the  total  cost  of  system  X as 

C__  = N.C.  + N„C„  + N„C_  + N.C.._  + N„C„„  + N„C„„ 


with  WA,  Wg,  and  Wc  representing  the  weights  of  A,  B,  and  C,  and  with  Wx 
representing  the  weight  of  system  X then 


WX  = °AWZ 


+ n W 
B B 


+ ncwc 


We  then  want  to  minimize  Cg^,,  satisfying  the  weight  constraint  which 
is  formulated  as  follows 


wx<  W 


0 


where  WQ  is  a specified  upper  limit  of  the  system  weight.  The  system  with 
the  lowest  CgT  for  which  the  above  inequality  holds  is  desired. 


APPENDIX  B 

SIM3  PROGRAM  DESCRIPTION 


1.0  INTRODUCTION 

The  simulation  program  SIM3  is  a Fortran  program  originally  developed 
by  the  Naval  Applied  Science  Laboratory  (NASL)  for  the  CDC  3200/3300  series 
computers  and  converted  for  use  on  the  CDC  6700  series. 

Equipment  failures  and  repairs  are  generated  through  a sequence  of 
phases,  i.e.,  a mission  scenario.  The  same  equipment  can  be  used  from 
phase  to  phase  but  the  reliability  configurations  (block  diagrams)  can 
change . 

DTNSRDC  has  added  several  features  to  the  NASL  version  of  SIM3: 

• Printing  option  when  the  system  aborts. 

• Computation  of  total  reliability  for  a mission. 

• Computation  of  reliability  for  each  phase. 

• Tabulation  of  individual  equipment  failures  for  each  phase. 

2.0  INPUT  DATA  FORMAT  AND  DESCRIPTION 

The  input  data  pack  consists  of  13  different  types  of  cards,  some  of 
which  are  repeated  when  the  system  consists  of  more  than  one  phase.  The 
first  two  cards  contain  indicators  to  control  printing,  as  described  in  the 
output  section.  Cards  3 and  4,  which  describe  equipment,  are  repeated  as 
required.  Card  5 indicates  the  end  of  the  reliability  data.  Cards  6 and  7 
describe  the  system  and  its  phases  and  are  repeated  for  each  phase.  A set 
of  Cards  8 and  9 is  required  for  each  subsystem  in  each  phase.  Cards  10 
and  11  are  repeated  as  required  to  describe  the  block  diagrams  of  each  sub- 
system in  each  phase.  Card  12  is  used  to  renew  equipment.  For  each  run 
all  the  equipment  must  be  renewed  in  the  first  phase.  All  values  are 
right-justified.  A blank  card  must  be  supplied  if  there  is  no  input  for 
one  of  the  cards.  There  must  also  be  a blank  card  between  the  last  type 
card  and  the  first  equipment  card.  See  Figure  4 for  input  deck  setup.  A 
description  of  the  contents  of  each  different  type  of  card  follows. 


SIMULATE 


Repeated  for 
each  phase 


Repeated  for 
each  subsystem 


Repeated  as  required 
to  describe  subsytem  { 
configuration 


Repeated  as 
required 


RENEW,  Phase  No.,  Lowest  Equip.  No., 
Highest  Equip.  No..  Increment 


BRANCH,  Branch  No.,  Equip.  No. 
(Max  14)  CONT 


BLOCK,  Block  No.,  No.  of  Branches 
in  Block,  No.  of  Branches  required 


SSTIME,  No.  Blocks,  Phase  No.,  Tj,  T2, 
Ty  Subsys.  Code  Name 


SUBSYSTEM,  Subsys.  Name  & Ident., 
Subsys.  Code  Name 


STIME,  Phase  No..  No.  Subsys..  T.,  T-. 
T3.  SYSTEM 


SYSTEM,  Phase  No.,  No.  of  Subsystems, 
Time  at  Start  Phase.  Time  at  End  Phase 


ENDTABLE,  No.  Missions,  No.  Phases.  RNS, 
C Down 


EQUIPMENT,  Equip.  No.'s  (15),  Type,  Type  No. 


Blank  card 


TYPE.  Type  No..  MTBF,  MTTR,  UF. 
Type  Description 


I OPT  (Optional  Print  for  Abort  Messages) 


KS  (Optional  Print  for  Final  Output) 


First  Card 


Figure  4 - SIM3  Source  Deck  Setup 
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Variable 

Name 

Cols. 

Card 

1 - Indicator  Card 

KS  (1) 

10 

KS  (2) 

20 

KS(3) 

30 

KS  (4) 

40 

KS  (5) 

50 

KS  (6) 

60 

Card 

2 - Indicator  Card 

IOPT 

1-4 

Card 

3 - Type  Card* 

ID 

2-5 

I 

11-14 

X 

21-30 

Y 

31-40 

U 

41-50 

F 

73-80 

Card 

4 - Equipment  Card** 

ID 

2-5 

LOAD 

12-15 

(1  to  15) 

16-19 

68-71 

IQ 

73-76 

IT 

77-80 

Card 

5 - End  Table  Card 

ID 

2-5 

L0AD(1) ) 
LOAD (2)) 

12-19 

L0AD(4) 

24-27 

L0AD(6) 

32-35 

LOAD (8) 

40-43 

Card 

6 - System  Card 

ID 

2-5 

JPHASE 

11-14 

NSS 

17-19 

Description 

Replace  jump  switches  in 
original  SIM3  routine. 

If  KS  (1  to  6)  t 2,  all 
optional  output  will  be 
printed.  A value  of  2 will 
suppress  printout. 

IOPT  = 1 Print  abort 
messages 

IOPT  = 2 Omit  abort  messages 

The  word  TYPE  punched 
Type  number 

Mean  time  between  failures 
(MTBF ) 

Mean  time  to  repair  (MTTR) 
Utilization  factor 
Type  name  (Any  alpha- 
numeric designation) 

The  letters  EQUI  punched 
Equipment  numbers , each 
consisting  of  four  digits 
for  a maximum  of  15  dif- 
ferent equipments  on  one 
card 

The  word  TYPE  punched 
Type  number 

The  letters  ENTA  punched 
Number  of  missions  to  be 
run 

Number  of  phases  to  be  run 
Initial  random  number 
(Not  used  at  present) 

C Down.  If  number  of 
system  failures  > C Down, 
sum  system  downtimes  on  a 
separate  counter 

The  letters  SYST  punched 
Phase  number 
Number  of  subsystems  in 
system 


*Card  3 is  repeated  for  each  type  number  in  the  configuration. 
**Card  4 is  repeated  for  each  piece  of  equipment. 
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Variable 

Name 

Cols. 

Description 

Card 

6 (Continued) 

STPHAS 

21-30 

Calendar  time  at  start 

of  phase 

ENDPHA 

31-40 

Calendar  time  at  end  of 

phase 

Card 

7 - System  Time  Card 

ID 

2-5 

The  letters  STIM  punched 

JPHASE 

11-14 

Phase  number 

NSS 

17-19 

Number  of  subsystems  in 

the  system 

SSTIME(l) 

21-30 

System  allowable  negligible 

downtime  (T^) 

SSTIME(2) 

31-40 

System  allowable  sustained 

downtime  (T^) 

SSTIME(3) 

41-50 

System  allowable  cumulative 

downtime  (T^) 

F 

73-80 

The  word  SYSTEM  punched 

Card 

8 - Subsystem  Card 

L0AD(1) 

2-5 

The  letters  SUBS  punched 

LOAD (2) 

6-9 

LOAD (19) 

74-77 

Subsystem  name  and  identi- 

fication 

LOAD (20) 

78-80 

Subsystem  code  name,  any 

designation  desired 

Card 

9 - Subsystem  Time 

ID 

2-5 

The  letters  SSTI  punched 

Card 

MBL 

11-14 

Number  of  blocks  in  the 

subsystem 

K 

17-19 

Phase  number 

SSTIME(l) 

21-30 

Subsystem  allowable  negli- 

gible downtime  (T^) 

SSTIME(2) 

31-40 

Subsystem  allowable  sus- 

tained downtime  (T^) 

SSTIME (3) 

41-50 

Subsystem  allowable  cumula- 

tive downtime  (T^) 

TITLE 

73-80 

Subsystem  code  name 

Card 

10  - Block  Card* 

ID 

2-5 

The  letters  BLOC  punched 

IBL 

12-15 

Block  number 

MBR 

16-19 

Number  of  branches  in  block 

NEED 

20-23 

Number  of  branches  required 

for  operation 


*Card  10  is  repeated  to  describe  the  entire  subsystem  configuration. 


Card  11  - Branch  Card* 


Card  12  - Renew  Card 


Variable 

Name 

Cols. 

Description 

ID 

2-5 

The  letters  BRAN  punched 

IBR 

12-15 

Branch  number 

L0AD(1) 

16-19 

Equipment  numbers  in  branch 

LOAD ( 2 ) 

20-23 

(4  cols,  for  each  equipment 

LOAD (14) 

68-71 

no.;  max.  of  14  equipments) 

IKK 

73-76 

The  word  CONT  is  punched  in 
cols.  73-76  if  there  are 

more  than  14  equipments  in 
the  Branch.  Additional 
equipment  nos.  start  in 
column  16  of  the  continuing 
card(s) . 


ID 

2-5 

The  letters  RENE  punched 

IQ 

12-15 

Number  of  phase  in  which 
renew  action  is  to  take 
place 

KL 

16-19 

Lowest  equipment  number  : 
the  set 

KH 

20-23 

Highest  equipment  number 
in  the  set 

INC 

24-27 

Increment  counter  for  re- 
newal of  equipment 

INC  = 1 (or  blank) , renew 
each  equipment;  INC  = 2, 
renew  every  other  one; 

INC  = 3,  renew  every  third 
equipment 


Note:  Equipment  to  be  renewed  at  the  start  of  any  phase  must  be 
grouped  in  sets  of  consecutive  numbers. 

Example:  To  renew  the  equipments  10  to  20  and  50  to  75,  two  different 
RENEW  cards  are  required. 

Card  13  ID  2-5  The  letters  SIMU  punched 


3.0  OUTPUT 

j SIM3  output  falls  into  two  categories:  automatic  and  optional, 

i 

Optional  output  is  generated  by  the  program  when  the  elements  of  KS  are 
not  equal  to  2.  Automatic  output,  printed  only  at  certain  times,  includes 


— 

*rar-A  11  i « rpnpat-pd  to  describe  the  entire  subsystem  conf ieuration . 


• Printout  of  all  input  cards. 

• Printout  of  mission  abort  data  including  the  equipments  that  caused 
the  abort,  the  time  of  abort,  and  the  time  that  the  equipment  will  come 

up  again. 

• Summary  tabulation  at  the  end  of  each  phase,  containing  the  number 
of  simulated  missions  that  entered  the  phase  and  the  number  aborted  during 
the  phase. 

The  optional  output  is  controlled  by  the  values  assigned  to  the  KS 
array  as  follows: 


KS  (1)  = 0 
KS (2)  = 0 


Print  out  equipment  state  table  at  time  of  abort 


Print  out  each  equipment  state  table  if  system  is  down 
at  end  of  phase 


KS (3)  = 0 


Each  time  system  goes  down,  print  out  the  time  that  it 
went  down,  how  long  it  stayed  down,  and  the  time  it 
resumed  operation 


KS(4) 

KS (5)  = 0 
KS (6)  = 0 


Not  used  in  this  version 


Print  out  each  event  as  it  occurs  during  the  simulation 
Internal  tables  of  events  occurring  during  simulation 
This  is  a debugging  feature. 


A value  of  2 for  any  of  the  above  will  prevent  printing. 
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4 . 0 PROGRAM  LISTING 


PROGRAM  MIKEIINPUT, OUTPUT, TAPE5*INPUT, TAPE6*0UTPUT,TAPE1,TAPE2> 
DIMENSION  KS(10),F<2) 

DIMENSION  TI2<50> 

DIMENSION  LOAO(ZO)  ,REL(10> 

DIMENSION  IN0R0I6),  I TYPE  1201*  NFAILSC  150  0 1 , KEQU(1500> 
EQUIVALENCE  (ETIME (1) , INORO(  1) > 

COMMON  XHTBF(500> , XMTTR  (500),IOOMN(800 ) .L8L0C1  ( 2 SO  V , LBL0C2  (250) 
1* TITLE  150)* ISUB1 1 25) , ISUB2 (25 ) , SSTIHE(5,25) ,LOSTl (25) ,L0ST2(Z5> 

2*  LOST3 129) 

EQUIVALENCE  ILOAO«IOONNI 
COMMON  IEQU(1500),ETIME(1500> 

COMMON  STPMAS  .ENOPMA  ,NEQ. JPMASE ,TP,NPH,NMI , KSN ISS .NOR.NBL ,NSS, 
1NSS1 , ISMBL  «ISMSS 

OATA  JTVPEt JENOTt JEN0S/6HTVPE,6HEN0T,6HEN0S/ 

OATA  JCONT, JRENE/6HC0NT.6MRENE/ 


IOPT*l PRINT  ABORT  MESSAGES 

IOPT»2-— — OMIT  ABORT  MESSAGES 


READ  (5,6061  ( KS ( I > , 1*1, 6) 
READ  (5,607)  IOPT 

606  FORMAT  (8110) 

607  FORMAT  (16) 


FILL  EQU  AND  TYPE  TABLES 
IREAD* 1 
INRITE=2 
NEQ=0 
NTYPE*0 
N8L*0 
NBR*0 
NSS*0 

TOTALR  * 1.0 
RELP  * 1.0 
I OAT A * 1 
DO  1 I * 1,250 
LBLOCl(I)  * 0 
1 LBLOC2  ( I ) = 0 
00  2009  1*1,1500 

E TIME ( I ) * 1.E30 
IEQU( I > *0 
NFAILS(I)  * 0 
XEQU(I)  * 0 

2009  CONTINUE 

00  2608  I *1,500 
XMTBF ( I) *0 . 0 
2608  XHTTR ( I ) *0. 0 
C RE AO  TYPE  CAROS 

2010  RE AO (5, 2001)10,1, K,X,Y,U« (F(J),J*1,2) 

2001  FORMAT (1X,A6,5X,I6,2X,I3,1X,3E10.3,22X,2A6> 
TFCI9.NE.JT YPE ) GO  TO  2012 

2011  NRITE(6,2001)IO,I,X,X,V,U,(F(J),J=1,2) 

I F(XNTBF (I) >2051,2050,2051 

2051  MRITE (6, 2055) I 
GO  TO  2010 

2055  FORMAT (1X.6HTVPE, I5,1X,13H0EFINE0  TNICE) 
2050  XMTBF( I ) =X/U 


oooo  o ooo 


THIS  PAG® 
JBMlCa?* 


Jvjjsosa®101*5 


XMTTR( I)  *Y 
NTYPE=NTYPE*1 
GO  TO  2010 

C AFTER  LAST  TYPE  CARO  MUST  BE  A BLANK  CARO  .THEN  FOLLOWS  CQU  CAROS 

2012  READ (5,200 2110, (LOAO(I) ,1=1, 15) , IQ, IT 
IF(ID.EQ.JENOT)  GO  TO  2C13 

20 16  OO  2015  1*1,15 

IF(LOAO(I> .EQ.O)  GO  TO  2015 
2016  IBM*LOAO(I> 

IFd9M.LE.NEQ)  GO  TO  2056 

2095  NEQ  = ISM 

2096  IFdNPAKH  (IE OU( IBM) ) >2061, 2069, 2061 
2061  WRITE(6,2065)IBN 

GO  TO  2012 

2065  FORMAT ( IX, 6HEQU, , I5,1X,13H0EFINED  TWICE) 

2069  CONTINUE 

IEQU( IBM) alPACKHI IT, IE QU (IBM)) 

2015  CONTINUE 

WRITE (6, 2002) ID, (LOAD (I) ,1*1, 15), IQ, IT 
GO  TO  201 2 

ALL  EQV  ANO  TYPE  CARDS  HAVE  BEEN  READ  IN  THE  LAST  CARO  READ  AT 
THIS  POINT  NAS  AN  ENDTABLE  CARO 

2013  NHI=LO AO  ( 1 ) *10  +LO  AO  (2  ) 

NSHISS=NMI 

C DOWN  =LOAO (S) 

NPH*L0A0(6> 

L ANO=LOAO( 6 ) 

CALL  RANSET (LAND, Y) 

WRITE (6, 2006) NMI ,NPH 

2006  FORMAT (1H1,5X, 18, IX, 25HNISSIONS  WILL  BE  RUN  THRU, 16, IX, 7HPHASES. > 


PHASE  GEOMETRY  CAROS  SHOULD  APPEAR  NEXT  OR  ENDSIM 
NEXT  CARO  SHOULO  BE  A SYSTEM  CARO 
2100  WRITE (6,2006) 

00  2601  I * 1, NEQ 

2601  I EQU (I >*ANO(IEOU( I >,60000 000 0000777700 OOB) 

NMISS=NSMISS 
WRITE ( 6, 999) IRE AO 

999  F ORMA T ( 3H  LU,I 3,1X,19HINPUT  TO  NEXT  PHASE) 

RE AO (5,2001) ID, JPHASE ,NSS,STPHAS  ,ENOPHA 
IFdO.NE. JENOS)  GO  TO  2121 

C2020  IS  AFTER  LAST  PHASE  IT  CALLS  FOR  FINAL  SUMMARY  TABLES 
C2020  CALL  UNLOAD (IWRITE) 

C COMPUTE  TOTAL  RELIABILITY  FOR  COMPLETE  MISSION************** 
00  1190  JJ  * 1,  NPH 
TOTAL?  = REL(JJ)  • TOTAL? 

1190  CONTINUE 

WRITE (6,  895)  TOTALR,  NPH 

895  FORMAT  (IX,  60HTOTAL  RELIABILITY  FOR  COMPLETE  MISSION*  , F8.5, 
116HAT  THE  ENO  OF  , 16,  9H  PHASES  ) 

STOP 

2121  WRITE16, 2001)10, JPHASE, NSS,STPHAS  .ENOPHA 
N SSl sNSS^l 

READ (5, 200 1)10, JPHASE ,NSS ,(SSTIME(M,HSS1),M*1,3),F 
WRITE (6, 200 1)10, JPHASE, NSS, (SSTIME (H.NSSl) ,M*1,3) ,F 
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IBIS  PAGE  IS  BEST  QUALITY  FRACMCABIjI 
mM  COPY  FURNISHED  TO  DDC 


TITL£(NSS1I«F(1I 
T I2INSS1)  * FI 21 
00  200  I*1,NSS1 
L0ST1 111*0 
LOST2 ( 1 1 — 0 
LOST 3 1 11*0 
ISUB1 (I)*0 

200  rsus2iri-o 

C 00  FOR  ALL  SUBSYSTEMS 
LBL*1 
LBR=1 

C LBL  IS  LOM  BLOCK  NUMBER  IN  THIS  SS. 

C LBR  IS  LOW  BRANCH  NUMBER  IN  THIS  BLOCK. 

00  2200  11*1, NSS 

REAO(5 , 200  3ILOAO 
2003  FORMAT  (IX, 1BA)>,A3I 
WRITE  1 6,  200  3)  LOAD 

READ  IS,  2001 » 10,  NBL,K,  (SSTIHE (N, II ) , H* 1, 3) ,TITLE( II I , TI2III > 
WRITE (6, 2001) 10, MBL,K, (SSTtHE(M,III,M*l,3l,TI TLE (III, TI 2(11) 
I SUB1 ( II I *LBL 
I SUB 2 ( 1 1) *LBL»  MBL-1 

00  FOR  ALL  BLOCKS  IN  THIS  SUBSYSTEM 
00  2202  JJ*1,HBL 
READ (5,2002)  ID, IBL,MBR,NEED 
WRITE (6, 2002)10,1 BL,NBR,NEEO 
MQ=IBL«-LBL  -1 

LBLOC1  (MQ)  * IPACKL ( LBR,  L8L0C1  INQII 

LBLOC1  (MQ)  * IPACKH(LBR*N8R-1,  L8L0C1  (MQ) I 

LBLOC2  (MQ)  * IPACKHIII  , LBL0C2  (MQ)I 

LBL0C2  (MQ)  * IPACKL (NEED,  LBLOC2  IMQI) 

00  FOR  ALL  BRANCH  CAROS  IN  THIS  BLOCK 
00  2201  KK*1 , MBR 

2110  REAO  (5,200  2)  10,  IBS,  (LOAD (N)  ,N=1, l«,l  , IKK 
HRITE(6,2002IIO,IBR, (LOAD (NI,N* 1,161,1 KK 
2302  f ORM  AT  (LX,A<,,6X,15I6flX,A6,I6) 

00  211 5 N=l,16 
IT*LOAO(N) 

IF(IT.EQ.O)  GO  TO  211S 
2116  IQ=I8R*LBR-1 

IF  (INPAKL  (IEQU(IT)I)2071, 2070, 2071 
2071  MRIT£(6, 20751  IT 
IK  * KS(6> 

IK  = 1 

IFIIK.EQ.2)  GO  TO  2110 
C2500  CALL  UNLOAD  I IWRITE) 

2500  CONTINUE 

2075  FORMAT (1X,6HEQU., I5,1X,23HAPPEARS  IN  TWO  BRANCICS) 

2070  IEOU (IT) * IPACKL (IQ,IEQU(IT)I 
2115  CONTINUE 

IFIIKK.EO. JCONT)  GO  TO  2110 

2201  CONTINUE 

LBR  =LBR  tHBR 

2202  CONTINUE 

LBL  =LBL  *HBL 
2200  CONTINUE 
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NBL*LBL-1 
N8R*LBR-1 
I SUBMNSS1 ) =1 
ISUB2 (NSS1) *N8L 
C 

C PHASE  GEOMETRY  HAS  BEEN  READ  IN 

C 

C 

C NEXT  CARO  SHOULO  BE  A RENEW  CARO  OR  A SIMULATE  CARO 
C FIRST  CLEAR  RENEWS  FROM  PREVIOUS  PHASES 
00  2 *>00  I-l.NEQ 

2600  IEQU  ( 1 1 x AMO  (00 000000080037 777777B, IEQU  (III 

2156  RE AO (5  » 2002)10. I Q.KL, KH, INC 
IFtlO.NE. JRENE ) GO  TO  2151 

2150  IF(INC)2152, 2153, 2152 

2153  I NC* 1 

2152  00  2155  K«KL.KH,INC 

2155  IEQU (K)*OR( 600 00 00000 OOOOQQOOQOB. IEQU (K) > 

WRITE (6, 200 21 10, IQ, KL.KH. INC 
GO  TO  2156 
C 

C SIMULATE  CARO  START  SIMULATION 

C START  OF  PHASE  JPHASE 

2151  00  601  KNI=1,NNI 
TIME=STPHAS 
SUMDOW  =0.0 
SUNOOW  =0.0 

IF  ( JPHASE- 1)  10.19,10 

10  REAO I IREAD)  ITEMP.ITEMPl .ITEMP2, TEMPI, TEM12 , TENP2, 

1 (ETIME ( J) ,J  = l.NEQ) 

C IF  FIRST  WORO=0, MISSION  WAS  SUCCESS 
IF  (ITEMPI  18,19.10 

18  NHISS=NNISS-1 
GO  TO  300 

19  00  20  K=1,N0R 

20  I DOWN( K) =0 

C RENEW  EQUIPMENTS  SPECIFIED  ANO  OETERMINE  INITIAL  STATE  OF  BRANCHES 
00  25  1*1, NEQ 

IF  ( IEQUI I ) ) 921,25.22 

921  IFtINPAKH  (IEQU (II)) 21, 25. 21 

21  CALL  SETE(1,II 
GO  TO  25 

22  IF  (ETIME(I)I  26,23.25 
C ETIME=0  BUT  IEQU  NOT  =0 

23  MRITE(6.610 ) 

610  FORMAT ( 1H6 ,5X,6HETIME (.12 ,5H)  * 0.5X.6HMAINI 

26  K«INPAKL  (lEQU(I)l 
IOOWN(K) = I DOWN (K) *1 

25  CONTINUE 

C SET  INITIAL  CONDITIONS  OF  BLOCKS, SUBSYSTEMS  ANO  SYSTEM 
I SUB1(NSS1)=AN0 (000000800 000 3T777777B, ISUBl(NSSl)  ) 

00  50  KSS* l.NSS 

CALL  SSUP ( l.KSS) 

IF  (ISWSS)  65,66,65 

65  I SUB1(NSS1)=0R (60000000000 OOOOOOOOOB.ISUBl (NSS1) ) 

66  SSTIME(6»KSS)*0. 

SSTIME (5,KSS)=0. 
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50  CONTINUE 

SSTIME  (4,NSS1)=0. 

SSTINE(5,NSSl)*0. 

C THE  ACTUAL  MISSION  SIMULATION  BEGINS  HERE 
60  TP*TIME 

IF(KS(6I-2)51, 54,51 

51  WRITE(6*52I TP, ( IEOU ( J ) ,ET I ME ( J> , J=1,NEQI 

WRITE ( 6*53) (IOOWN(KI,K*l,NBR>, (LBL0C2  (II , 1*1 ,NBL ) , (I SUB1( J) , J*1,N 
1SS1I  • ( I SUB 2 ( JJ I , J J*l, NSS1 1 

52  FORMAT(1X,F10.4,/(09,F10.4II 

53  F ORH  A T ( 1 X , 0 8 1 

54  CALL  EVENT ( TIME,  IFORR,  KEQ I 
IK  * KSI5I 

IFdK.EQ.2l  GO  TO  52 
51  MRITE(6.90I KEQ, E TIME (KEQ) . KMI 
90  FORMAT (120, F10. 3, 5X.7HMISSI0N, 110) 

92  OELT=TINE-TP 

C CHECK  IF  ANY  OOMN  TIMES  HAVE  EXCEEOEO  CRITERIA 
00  70  KSSxl.NSSl 

IF  (ISUB1IKSSI)  65,66,70 
C ISUB1=0  FOR  SOME  SUBSYSTEM  OR  SYSTEM 

64  WRITE (6,6011  KSS 

601  FORMAT (1H0,5X,6HI SUB1 ( ,I2,5H)  * 0) 

65  SSTIME (6, KSS) *SSTIME (4.KSS) *DELT 

IF(SSTIME(4 ,KSS) -SSTIME (2 , KSS 1 1 66,66,202 

66  IF  I SSTIME ( 4, KSS I -SSTIME (l.KSSI I 70,70,67 

67  IF  (SSTIME (5,K  SSI ♦SSTIME 1 4, KSS I -SSTIME 1 3, KSS)  I 70,70,203 

70  CONTINUE 

71  CONTINUE 

C CHECK  IF  TIME  GREATER  THAN  ENO  OF  PHASE 
IF  (TIHE-ENOPHA  I 75,75,250 

75  KBRsINPAKL  (IEQU(KEQI) 

C CHECK  IF  EQUIPMENT  IS  IN  SYSTEM 
IF  (KBRI  76,600,76 
600  CALL  SETC(0,KEqi 
GO  TO  60 

C FIND  BLOCK  WHICH  EQUIPMENT  IS  IN 

76  00  BO  KBL= 1, NBL 

IF  (KBR-INPAKH  (LBLOC1  (KBL I ) ) >5,05,00 

00  CONTINUE 

C BRANCH  NUMBER  HIGHER  THAN  HIGHEST  BRANCH  IN  HIGHEST  BLOCK 
WRITE (6,602) 

602  FORMAT ( 1H0  » 5X, 21H  SEE  COMMENT  ABOVE  80) 

05  KSS*INPAKH  (LBLOC2  (KBL) I 

ISSPRE  sISUBKKSS) 

ISYPRE  =ISUB1(NSS1> 

C PERFORM  EVENT  ANO  UPDATE  STATE  OF  8RKBR«BLKBL , SBSYSTEM  KSS  AND  SYSTEM 
CALL  SETE  (O.KEQ) 

IOOWN(KBR)=IDOWN(KBR) ♦IFORR 
CALL  BLOCUP (KBL ) 

IF  (IFORR)  120,100,101 

C EVENT  NEITHER  FAILURE  NOR  REPAIR,  OR  STATE  WAS  NEITHER  UP  OR  OOWN 

100  MRITE(6,603) 

603  FORMAT (1H0,5X,22H  SEE  COMMENT  ABOVE  1001 
C EVENT  WAS  FAILURE 

101  IF  (ISNBL)  110,60,110 

110  IF  (ISSPRE  I 60,100,112 


IHIS  PAGE  IS  BEST  QUALITY  FRACTICABU 
IBGM  COrl  i'UAWlSEED  TODDC  ^ 


112  ISUB1 (XSSI *OR (600000000  000000000008, ISUB1  (XSSI) 

IF  (ISYPRE  I 61, 110, 11% 

11%  ISUB1 (NSS1I *OR (6000000000  00000000008, ISUBl(NSSl)  I 
GO  TO  60 

C EVENT  WAS  REPAIR 

120  IF  IIOOMN  IK8R I I 60,122,60 

122  IF  (ISWBLI  60,125,60 

125  CALL  SSUP(0,XSSI 

IF  ( ISMSSI  60,126,60 

126  IF  (ISSPRE  ) 127,100,60 

127  LOST1 (KSS)*LOSTl (XSSI >1 

IF  (SSTINE (%« XSSI -SSTINE ( 1 ,KSS) I 1%0, 1%0,130 
130  SSTINE (5, KSSI«SSTINE(5, XSSI ♦SSTINE (%, XSSI 
160  SSTINE (%, XSSI* 0. 

CALL  SVSUP 

IF  ( ISUB1 (NSS1 I I 60,100.15% 

15%  IF  (ISVPRE  I 155,100,60 

155  LOST1 (NSS1 I *LOSTl (MSS  lid 
XQX*SSTIHE (6.NSS1I 
TOOMN*  TINE-XQX 

SUHOOH  sSUHOOW  ♦XQX 
IFtXQX .LE.COOWNI  GO  TO  %51 
%50  SUNOOM  * SUNOOM  ♦ XQX 
%51  IF(XS ( 31-21  156,165,156 

156  WRITE (6,226 1 JPHASE, TOONN, TIME, SSTINE (%*NSS1 1, XNI 

165  IF(SST INE (%,NSS1) -SSTINE (1,NSS1) I 100,100,170 

170  SSTIME(5,NSSllsSSTIH£(5,NSSl I ♦ SSTINE (%  «NSSlt 

100  SSTINE (%,NSS1IZ0. 

GO  TO  60 

C ABORT  PROCEDURE 

202  ICRIT*2 

T ABORT= T INE -CSSTI HE (%, XSSI -SSTINE (2,KSS) I 
GO  TO  20% 

203  ICRITsj 

TABORTsTINE-ISSTI HE (%, XSSI ♦SSTINE (5,KSS)-SSTINE(3,KSSI> 

20%  IF  (TABORT-ENOPHA  I 205,71,71 

205  IF  (ICRIT-21  206,207,206 

206  LOST3(KSSI *LOST3 (XSSI *1 

207  LOST2 (XSSI s LOS T2 (XSSI  d 
IFdOPT  . EQ.  21  GO  TO  205 

200  WRITE (6, 220 1 JPHASE, XNI, TABORT, TITLE (XSSI, TI2CKSSI  ,ICRIT, SSTINE 
1 (ICRIT.XSSI 

209  IF(I0ATA.EQ.2IG0  TO  215 

210  JKNI  > 0 
IOATA  * 2 

215  IJ<  1 

00  516  I * 1 , NE  Q 

1 TYPE ( IJI  = I 
IJ  * IJ  ♦ 1 

IF(ETINE(II >513,516,516 
513  IFdNPAKH  (IEQUdl  1 1516,516,51% 

C CONFUTE  TOATL  TINES  OF  EACH  EQUIPMENT  FAILURE 
51%  IF  (XNI  .EQ.  JKNI I GO  TO  512 
JKNI  * XNI 

KEQUdl  = KEQU  (II  ♦ 1 
IFdOPT. EQ. 21  GO  TO  516 
512  WRITE (6,51511, ETIHEd I 
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515  FORMAT  ( 17X , 9HEQUI PHENT  ,I5,24H  OOMN  IT  MILL  COME  UP  AT.F10.4) 

516  CONTINUE 
IK  * KS(l) 

IFIIK.EQ.2)  GO  TO  518 

517  CALL  PPROG 

518  I TEMP  * ICRI T 
ITENP1=KHI 

I TEMP2  = JPHASE 
TEMP1=TITLEIKSS» 

TEN12  a TI2IKSS) 

TEMP2=TABORT 
GO  TO  280 

C ENO  OF  PHASE  PROCEDURE  FOR  MISSION  KMI 

250  IFIISUB1 (NSS1) > 260,251,272 

C SYSTEM  NEITHER  UP  NOR  OOMN,  OITTO  SUBSYSTEM 

251  MRITE! 6,606) 

606  FORMAT tlHO ,5X, 17HSEE  COMMENT  ABOVE) 

260  TOOMN*  TIME-SSTIME (4.NSS1) 

TOUR=ENDPHA  — TOOMN 
IFIKSC3I-2)  265,270,265 

265  MRITEI6,226)JPHASE, TOOMN, ENOPHA  .TOUR, KMI 

270  MR ITEI6.225) JPHASE, TOUR, KM I 
I FCKS 1 21 -2)  271,272,271 

271  CALL  PPROG 

272  ITEMPaO 

280  OO  250  1=1, NSS 1 

IF  (ISUBl(I))  282.251,290 
282  LOSTHII=LOST1H>4’1 
290  CONTINUE 

300  MRITE  ( IMRI TE)  I TEMP, l TEMPI, ITEHP2, TEMP 1.TEN1Z ,TEMP2, 

1 (E TI  ME  ( J I ,J  = 1 ,NEQ) 

IK  = KS ( 3 t 

IFIIK.EQ.2)  GO  TO  401 
600  IFISUHOOM.EQ.O.0I  GO  TO  601 
410  MRITEI6.402) JPHASE.KMI.SUMOOM  ,COOMN,SUNOOM 

402  FORMAT (1X,5HPHASE,I5,1X,29HT0TAL  SYS  DOMNTIHE  IN  MISSION, 15, IX, 3HM 
1AS,E14.6,4H  MR S/10X.14HSYS  OOMNS  .GT..F6.0.8H  HRS  MAS,F10.4,4H  HRS 
21 

401  CONTINUE 

C ENO  OF  PHASE  JPHASE  PROCEDURE 
MRITE (6,227)NMISS« JPHASE 

C MRITE  EQUIPMENT  NO.  AMO  TOTAL  FAILURES****************************' 
IOIFF  = 0 

00  1110  IJ  > 1,  NEQ 

MRITE  16,820)  ITYPE(IJ),  KEQUIIJ) 

820  FORMAT  (IX,  15HEQUIPMENT  NO.  , 16,  5X,  16HT0TAL  FAILURES3  ,14) 
IOIFF  = IOIFF  ♦ KEQUIIJ) 

1110  CONTINUE 

MRITE  (6,821)  IOIFF 

821  FORMAT  (41X,  4H , / 41X,  14) 

00  1115  IJ  a l,  NEQ 

KEQUIIJ)  a 0 
1115  CONTINUE 
IDATA  a 1 

00  311  I*1,NSS1 
I TEMP=L0ST2 (I) ♦LOST3II) 

RELL1  a LOST1II) 
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311  MRITE (6>226l  T ITLE <11 ,TIZ  I II , SSTIMEll.tl, 

1SSTIHE(2.II,SSTIHE<3,  II .L0ST2 II I .L0ST3  III , ITENP.L 0ST1 II I 
C COMPUTE  RELIABILITY  FOR  EACH  PHASE  *•••*•*•••••••••••••••••••••••• 

RELNM  < NMISS 

R EL < JPHASE I * < RELNM  - BELLI I / RELNM 
RELP  * RELP  • REL  < JPHASE) 

MRITE  <6,  8001  JPHASE.  REL IJPHASEI • JPHASE.  RELP 

800  FORMAT  C/1X,  2 6H RELIABILITY  OURIMC  PHASE  .IZ.  3M  « ,F5.3, 

1 13X,  Z5HRELI ABILITY  UP  TO  PHASE  ,IZ,  3H  « , F5.3) 

ITEMP.IMRITE 
ENOFILE  IMRITE 
REWIND  IMRITE 
REMIND  IREAO 
IMRITE«IREAO 
I REA 0*1  TEMP 
CO  TO  Z100 

220  FORMAT  (1X.9HIN  PHASE  .16.  AX.  8HMISSION  .16.  AX,  15MABORTEO  AT  TIHE.F1 
10 • A. 10 H BECAUSE  .2AA.15H  EXCEEDED  CR IT , 1 3.5X ,F1 0. 3, 5M  HRS. I 

225  FORMAT  < IX, Z7HSYSTEM  OOMN  AT  ENO  OF  PHASE.I6.13H  FOR  OURATION.FIO. A 
1, 6X,  7H MISS  ION,  161 

ZZ6  FORMAT I1X.1ZH0URIN6  PHASE. 16, Z0H  SYSTEM  MENT  OOMN  AT.F10.A.16H  SYS 
ITEM  CAME  UP  AT.F10.A.11H  DOWNTIME  s, F10. A, 6X,  EMISSION,  161 

227  FORMAT I1X.I6.23H  MISSIONS  ENTERED  PHASE. 161 

228  FORMAT  I IX , ZAA, AX, 3HTls,F10.A,AX,3HT2s,F10. A»AX»3MT3»* FIB .A, AX. 7HAB 
10RT2** 16 , AX ,7HABORT3s ,16, AX, 9HT0TA80RT*. I6.AX.8HTOTOOMNs.I6l 

ENO 


SUBROUTINE  PPROC 
DIMENSION  LOAOI20I 
DIMENSION  IM0R0I6I 
EQUIVALENCE  IETIME 111 , IMOROI II I 

COMMON  XMT8FI500I , XMTTRI5  001 , 1 OOMN  <800  I .LBLOC1  I2S0), LBL0C2  (250) 

1.  TITLE (501. ISUB1 IZ5I , ISUBZ IZ5I , SS TIME  15. 25 ) .LOST1 125 ) .LOSTZI 25) 

2. L0ST3IZ5I 

EQUIVALENCE  ILOAO.IOOMNI 
COMMON  IEQUI1500 1 .ETIME 115001 

COMMON  STPHAS  , ENOPMA  ,NEQ. JPHASE. TP, NPH.NMI, NSMISS.NBR.NBL.NSS, 
1NSS1 , ISMBL  • ISMSS 


DIMENSION  ICI10I 
DIMENSION  IJKI10I 
OATA  J1MX, J1H/1HX.1H  / 

00  601  Ksl.10 
601  IJKIKIsK-1 

MRITE 16. 10)  ENOPHA.IIJKIKI.Ksl.lOl 

10  FORMAT ILX.l JHPHASE  ENOS  AT.F1Z, 3/A0X.50HTABLE  OF  EQUIPMENT  STATES 
1 ANO  TINE  OF  NEXT  EVENT/AM  NO, 9K . II, 91 1ZX , II  I/I 

INEQsNEQ»1 

DO  A25  Isl.INEQ.10 

1 J-I-l 
L*IJ*9 

MRITE  16.111  IJ,  IETIME  IJI.JsIJ.LI 

11  FORMAT  1 1M  , I A. 10 I2X.F 10.2 1 1 
00  2 J«l,10 

L»IJ*J-1 

IF  IINPAKL  IIEQU ILI I IA1, AO, A1 
AO  ICIJIsJIMX 
CO  TO  2 
A1  ICIJIsJIM 
2 CONTINUE 
A25  MRITE 16, 121 IC 

12  FORMAT <1X,10I12X,A1II 
RETURN 

ENO 
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SUBROUTINE  SETEIKEY.NI 
OIHENSION  L 0*01201 
DIMENSION  IWORO 161 
EQUIVALENCE  (ETIHC  (1 1 ,IMORD( it  I 

COMMON  XMTBF (5001  , XMTTR(500I  , IOOMM(88t I »L8L0C t (250I.LBLOC2  1250) 

1,  TITLE  ISO  I , ISUB1 (251 . ISUB2 (251 , SSTINE(5,25I .LOSTl (25t .LOST2 ( 25 1 

2, LOST3(25l 

EQUIVALENCE  (LOAO.IOOMN) 

COMMON  IEQU(15t0>,CTIHE(1500l 

COMMON  STPHAS  .ENOPHA  ,NEQ, JPHASE. TP.NPM.NNI ,NSMI SS.NBR.NBL .NSS. 
1NSS1  • ISMBL  « ISMSS 


KEY  >1  GENERATE  TIME  TO  FAILURE 

KEY  >0  GENERATE  TINE  TO  NEXT  EVENT 

RN  * RANF(OUN» 

I  TYPE* INPAKN  IIEQU(NI) 

IKEY*KEY»t 

IF(IKEV.EQ.2I  GO  TO  2 

1 IF(ETINE(NI  13.4.5 

4 MRITE ( 6. It  I N 

10  F0RNAT(lHt.5X.6HETINE(.I2.5HI  » 0.SX.4HSETEI 
C FIND  REPAIR  TIME 

5 ETINE(N>*-1.0*(-KHTTRdTYPE)*ALOG(RN»*ETINE(N>> 

RETURN 

C 6ENTERATE  TIME  TO  FAIL  IF  KEY*0  RECKON  TINE  FROM  START  OF  PHASE 

2 8«STPH»S 
GO  TO  6 

3 B*ABS(ETINE(NI I 

6 ETIME(N»*-XNTBF(ITYPE»*  AL0G(RNI»  8 
RETURN 

ENO 


FUNCTION  IPACK(I,KI 
ENTRY  IPACKH 
IF(I.GT. 20471  GO  TO  3 

IPACK*I*4096  ♦ ANO (00 0000 100 000 0000777 7B.KI 
RETURN 

ENTRY  IPACKL 
IFU.GT.204 7>  GO  TO  3 

IPACK  * I ♦ AND (000000000 000 377700 00 B.KI 
RETURN 
3 WRITE (6.5) 

5 FORMAT (1H0 ,5X, 9HI .GT. 2047  > 

RETURN 

ENO 


FUNCTION  INPAKdl 
ENTRY  INPAKL 

1NPAK  « ANO (00 000 0000 000001077773,1) 
RETURN 

ENTRY  INPAKH 

1NPAK  » ANO (000000 000000377700008, II /4096 

RETURN 

ENO 
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SUBROUTINE  EVENT  I TINE  .LSI6N.LP0SI 
OINENSION  LOAD  (211 
DINENSION  IN0R0I6I 
EQUIVALENCE  IETINE (It .IHORDIll I 

COHN  ON  XHTBFI500I  .XNTTRISOOI  , IOONN (000 1 .LBLOC1  (2SOI.LBLOC2  I2S0I 
1. TITLE (SOI , ISUB1  (2SI,  ISUB2I25I  .SSTIHEIS, 251, LOST  1 (ESI .LOST2I2SI 
E*  LOST)  (SSI 

EQUIVALENCE  ILOAO.IOONNI 
CONHON  lEQUdSBBI  *ETINE(1SB0I 

COHN  ON  STPHAS  .ENOPHA  ,NEQ*  JPHASE.TP,  NPH.NNI,  N5NISS,  NBR.NBL  ,NSS, 

1NSS1  * ISHBL  • ISMSS 
C 

c 

c 

TINE*ABS(ETINE 111  I 
LPOS-1 

00  2 J=1,NEQ 
R=ASS  IETINE  IJI I 
I F(R~ TINE 1 11*2*2 
11  TIHE-R 
LPOS-J 

2 CONTINUE 

IFIETINEILPOSI I 3.6,6 

3 LSICN.-1 
GO  TO  S 

% ISIGN-l 
S RETURN 
END 


SUBROUTINE  SYSUP 
OINENSION  LOAOI20I 
OIHENSION  IN0R0I6I 
EQUIVALENCE  (ETIHE 111  , INOROI 1 1 1 

CONHON  XHTBF(SOBI*XHTTR(SaOI .100NN ( ABO  I *LBL0C1  I2SOI.LBLOC2  I2SBI 
1*  TITLE  IS 01  * ISUB1 (2SI • ISUB2 (25 I .SSTIHEIS, 25 I .LOST 1 12SI  .L0ST2I2SI 
2.L0ST3I2SI 

EQUIVALENCE  (LOAD*IOONNI 
CONHON  IEQUI1S00 1 .ETIHE  (15001 

CONHON  STPHAS  .ENOPHA  *NEQ. JPHASE.TP. NPH, NHI , NSMISS, NBR.NBL.NSS* 
IN SSI. ISNBL, ISNSS 
C 
C 
C 

00  TO  1 = 1, NSS 

IF  ( ISUB1 (III  62.61,70 
C SUBSYSTEH  IS  NEITHER  UP  HOR  DONN 

61  HRITEI6.5I 

S FORHAT (1H0.SX, 17HSEE  COHHENT  ABOVE, SX, SHSVSUPt 

62  isuei(Nssii=ORi6oaoooooooaoaoooosooB,isuBiiNssiii 

GO  TO  rs 
70  CONTINUE 

ISUB1 (NSS1 1 =ANO (00000 0000 000 37777777B, ISUB1 INSS1 1 1 
75  RETURN 
ENO 
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SUBROUTINE  SSUP(KKK.K)  

DIMENSION  LOAD  (20) 

DIMENSION  1N0R0I6I 
EQUIVALENCE  (ETIME(l)  ,II)ORO(l)> 

COMMON  XHTBF(5  Ot ) » XHT7RI500J  , ZDOMNf 600  ) ,LBLOCl  (250>,LBLOC2  <2911 

1,  TITLE (50)  , ISUB1 (25), ISUB2(25) ,SSTIHE(5*25)  ,LOSTl 125)  ,L0ST2(25) 

2,  LOST J (25) 

EQUIVALENCE  (LOAO,IOONN> 

COMMON  IEQUI1500 ) , ETIHE  (1500# 

COMMON  STPMAS  .ENOPHA  ,NEQ, JPMASE ,TP, NPM, NMI , NSNISS . NBR.NBL, NSS, 
1NSS1  ,ISMBL  , ISNSS 


ISNSS*0 

I SUB1(K)*AND(0 00000100000 37777777B.ISU81 (K) ) 
I LOB  L*  I SUB  UK) 

IHIBL*ISUB2(K) 

00  50  J«IL08L»  IHIBL 
IF  IKKKt  51,52,51 

51  CALL  BLOCUP(J) 

52  IF(LBL0C2  IJ>>  53,55,50 

53  ISMSS*1 

I SUB1  IK) * ORUOOO 00 10 0000000 OOOOOB, ISUB1JK ) ) 
IF  ( KKK)  50,55,50 
LBLOC  >0 
55  CONTINUE 

HRITE(6,6)  J 

6 FORMAT (1H0 ,5X, 7HL BLOCK!, 12, 5HJ  « 01 
50  CONTINUE 
55  RETURN 
ENO 


SUBROUTINE  BLOCUP  (J) 

DIMENSION  LOAD  120) 

OIMENSION  IH0R0I6) 

EQUIVALENCE  (ETIME(l)  .IMORO(l)  > 

COMMON  XMTBFI5 00 ) , XHTTR(SOO) ,IDOHN (800 ) , LBLOC 1 I250),LBLOC2  (250) 

1,  TITLE (50) ,ISUB1 (251, ISUB2(25I, SSrrHE<5, 251, LOST! (25), L0ST2I25I 

2,  LC3T3  (25) 

EQUIVALENCE  (LOAO.IOONN) 

COMMON  IEQU(1500),ETIME( 1500) 

COMMON  STPMAS  , ENOPHA  ,NEQ, JPMASE ,T P, NPH, NMI , NSNISS, NBR,NBL« MSS, 
1NSS1 , 1 SMBL  • ISNSS 


I SMBL  = 0 

LBLOC2 (J ) = ANO (000 00 00 0000 03777 77776, LB LOC2TJ) ) 
IHI0R*INPAKH  (LBLOC1  (J) ) 

ILOBRzINPAKL  (LBLOC1  (.))  > 

IUP*INPAKL  (LBLOC2  (J)) 

ICT*IMI8R-IL0BR*1 
00  30  K*IL0BR,IHI8R 
IF  (IOONN(K))  26,30,20 
26  ICT=ICT-t 

30  CONTINUE 

IF  IICT-IUP)  31,50,50 

31  I SMBL* 1 

LBLOC2  (J)  *OR(5000 00000000 000000 OOB,LBLOC2  (J) ) 
50  RETURN 
ENO 
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APPENDIX  C 
BLOCK  DIAGRAM  DERIVATION 

The  system  definition  must  be  given  in  terms  of  a reliability  block 
diagram  which  is  derived  from  a functional  or  schematic  diagram.  The 
initial  system  definition  is  usually  given  in  terms  of  a functional  diagram 
which  describes  the  physical  connections  of  all  the  equipment.  In  order  to 
compute  the  reliability  and  the  availability,  this  functional  diagram  must 
be  transformed  into  a reliability  block  diagram.  Examples  of  functional 
and  block  diagrams  follow. 

A functional  diagram  illustrates  the  interaction  and  relation  of  the 


components.  This  functional  or  operational  (schematic)  diagram  reflects 
the  actual  sequence  of  operations — the  signal  path.  Equipments  connected 
in  parallel  are  drawn  in  parallel;  equipments  connected  in  series  are  drawn 
in  series.  For  example,  a system  might  consist  of  items  A,  B,  C,  and  D 
with  the  following  schematic 


The  following  reliability  block  diagram,  can  be  derived  from  this 
functional  diagram  to  show  the  effect  of  failures  on  the  system. 


An  equipment  whose  failure  causes  the  system  to  cease  performance  (mission 
abort)  is  drawn  in  series  in  the  reliability  block  diagram,  and  an  equip- 
ment whose  failure  causes  mission  abort  only  when  another  equipment  also 
fails  is  drawn  in  parallel.  These  representations  do  not  necessarily  cor- 
respond to  those  in  the  functional  diagram. 

This  block  diagram  indicates  that  a failure  of  A or  D would  result  in 
mission  abort,  whereas  if  either  B or  C failed,  the  system  could  remain 
operational  and  the  mission  would  not  be  aborted. 

Once  the  mission  scenario,  block  diagram,  and  data  are  known,  the  in- 
formation can  be  inserted  into  a reliability  program  to  obtain  the  required 
R/M  quantities. 


APPENDIX  D 

GEMJR  PROGRAM  DESCRIPTION 


1.0  INTRODUCTION 

GEMJR  is  an  analytic  model  for  predicting  R/M.  The  Poisson  failure 

process  is  used  to  develop  a stochastic  matrix  which  is  solved  to  determine 

reliability  and  availability  considering  repairmen,  equipment  redundancies, 

2 

and  standbys.  GEMJR  was  developed  along  the  lines  of  the  much  larger  GEM 
model,  in  order  to  examine  analytic  R/M  program  operations  and  to  compare 
results  with  those  of  the  simulation  R/M  program,  SIM3.  GEMJR  was  also  used 
to  determine  the  feasibility  of  smaller  R/M  programs  which  could  be  used 
when  all  the  power  of  GEM  was  not  required. 

The  GEM  program  fills  an  entire  CDC  6600  computer  and  uses  its  own 
compiler.  It  requires  a minimum  of  135,000  (octal)  words  of  memory,  300,000 
(octal)  words  for  complicated  applications.  The  computer  program  GEMJR  was 
developed  at  DTNSRDC  to  compute  reliability,  availability,  and  other  ele- 
ments of  maintainability.  GEMJR,  written  in  FORTRAN  IV  for  the  IBM  7090, 
incorporates  a Poisson  failure  process  described  in  Section  4.  The  theory 
and  the  calculations  are  similar  to  those  used  in  GEM. 

2.0  SUBROUTINE  DESCRIPTIONS 

The  sample  problem  referred  to  in  Section  3.4  will  be  used  as  a guide 
in  describing  the  operation  of  GEMJR.  GEMJR  was  written  especially  to  solve 
a specific  problem,  but  can  be  easily  extended  to  solve  other  types  of  R/M 
problems. 

The  terminology  incorporated  here  is  a bit  different  than  that  used 
in  the  SIM3  description.  In  the  sample  problem,  pictured  in  Figure  5,  we 
refer  to  the  blocks  as  stages,  i.e..  Block  1 becomes  Stage  1 and  so  on, 
except  that  Block  4 is  now  divided  into  two  stages.  Previously  Block  4 
represented  Equipments  8 and  9;  now  Stage  4 will  consist  of  Equipment  8 
and  Stage  5 of  Equipment  9.  There  will  be  a total  of  five  stages  in  this 
problem.  Otherwise,  the  mission  is  the  same,  consisting  of  three  phases 
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gure  5 - Block  Diagram  of  System  A for  Use 


I 


with  two  distinct  operational  levels.  In  this  example  we  will  not  be  con- 
cerned with  the  type  number,  and  equipment  number  will  be  used  only  as  a 
means  of  identification. 


'i 

ll 


t 


> 


The  following  paragraphs  describe  the  subroutines  in  the  program.  All 
required  input  is  imbedded  in  these  routines,  and  will  be  identified  in 
each  subroutine. 


2.1  EXECUTIVE  ROUTINE 

This  routine  is  the  control  center  of  the  program.  It  specifies  when 
and  how  the  reliability  and  availability  of  each  stage  in  the  mission  are 
to  be  computed.  Most  of  the  data  required  in  the  program  are  read  in  the 
executive  routine. 

The  calculation  of  the  reliability  and  availability  for  a specific 
stage  is  obtained  by  using  the  statement  CALL  HUM(J).  The  stage  is  identi- 
fied by  the  index  J which  represents  the  number  of  items  in  that  stage. 

The  reliability  and  availability  calculated  after  each  CALL  HUM(J)  are 
composite  quantities.  They  represent  values  up  through  that  stage.  For 
example,  the  reliability  calculated  in  Stage  3 represents  R^  x R2  x R3> 
where  is  the  reliability  of  the  first  stage  and  so  on.  Since  our  sample 
problem  consists  of  five  stages,  the  quantities  calculated  during  the  fifth 
stage  are  the  reliability  and  availability  of  the  entire  configuration  for 
duration  of  the  mission.  Figure  6 indicates  the  subroutine  calling 
sequence. 

The  following  input  is  required  in  this  routine: 


Variable  Name 


Description 


NST 

NPH 

TOM(N) 
N = 1, 

TINC 


NPH 


Total  number  of  stages  in  configuration 
Total  number  of  phases  in  mission 

Time  for  start  of  phase;  TOM(N)  represents  the  start 
of  the  Nth  phase 

Time  increment,  AT,  used  in  iteration  process  (see 
Section  4.2) 


87 


THREE 


RECON 


ERCL 


MOUSE 


CALC 


VECTOR 


CALC 


Figure  6 - GEMJR  Subroutine  Calling  Sequence 


XL,  XM  Arrays  containing  MTBF's  and  MTTR's  for  all  equipment 

in  Stage  1 

XLS,  XLM  MTBF  and  MTTR  for  all  other  stages.  (These  stages  do 

not  contain  more  than  one  type  of  equipment.) 

RBL,  RAL  Arrays  containing  initial  values  of  reliability  and 

availability 


2.2  SUBROUTINE  HUM(JN) 

JN  is  the  number  of  items  in  the  stage  called. 

This  subroutine  controls  the  calculations  for  each  stage.  Reliability 
and  availability  are  computed  up  through  the  stage  called  and  are  printed 
out. 

Input  Description 

NIND  NIND  = 0 indicates  one  equipment  stage  (Stages  4 and  5) 

NIND  = 1 all  other  stages 


The  following  quantities  are  not  input  but  are  described  for 
clarification: 


Variable 


Description 


A 

Array  containing  stochastic  matrix 

NP 

Phase  number  index 

IP 

IP  = 1, 

reliability  is  calculated 

IP  = 2, 

availability  is  calculated 

NSF 

Number 

of  up-states 

2.3  SUBROUTINE  STACK  (JN,N) 

N is  the  number  of  states  in  the  stochastic  matrix.  The  stochastic 
matrix  associated  with  the  number  of  equipment  JN  is  set  up  through  calls 
to  the  appropriate  subroutines. 

2.4  SUBROUTINE  CONV(P) 

P is  the  state  probability  vector.  The  stochastic  matrix  and  state 
probability  vector  associated  with  Stage  1 are  converted  from  the  form 
used  in  Phase  1,  to  one  suitable  for  use  in  Phase  2. 


w 


2 . 5  SUBROUTINE  FAT 


The  reliability  and  availability  at  each  stage  are  printed  out.  In- 
terval reliability  is  used  in  Phase  2 of  Stage  1.  To  get  the  reliability 
up  through  Phase  2,  this  interval  reliability  must  be  multiplied  by  the 
reliability  computed  in  Phase  1.  To  accomplish  this  operation  the  variable 


COT  is  introduced. 


Variable 


Description 


REL(J)  For  the  ITth  stage,  the  reliability  at  the  Jth  phase 

RAL(J)  For  the  ITth  stage,  the  availability  at  the  Jth  phase 


2.6  SUBROUTINE  RECON  (N,P,AS) 

This  subroutine  reconverts  the  .stochastic  matrix  of  Stage  1 from  its 
altered  form  used  during  Phase  2 to  its  original  form  for  use  during 
Phase  3.  This  subroutine  and  subroutine  CONV  are  necessary  since  Stage  1 
undergoes  a configuration  change  at  Phase  2,  requiring  an  alteration  in 


the  stochastic  matrix. 


2.7  SUBROUTINE  SER 


This  subroutine  computes  reliability  and  availability  of  single  equip- 
ment stages  (series  components) . 


2.8  SUBROUTINE  MOUSE  (N,AF,AS,NP, IP) 

This  subroutine  sets  up  the  infinite  series  in  order  to  calculate  the 
state  probabilities.  AF  is  the  sum  of  the  identity  matrix  and  the  first 


term  of  the  infinite  series.  AS  is  the  stochastic  matrix  A which  is  trans- 


formed into  operational  form.  The  first  term  of  the  infinite  series  is 
added  to  the  identity  matrix. 


Variable 


Description 


Number  of  terms  of  infinite  series  required  to  satisfy 
accuracy  criterion 


Array  containing  truncation  errors  for  each  series 
calculation  (printed  out) 


5 


► v- 


2.9  SUBROUTINE  CALC  (AF,AS,N,NIN,T) 

The  sum  of  NIN  terms  of  the  infinite  series  is  calculated. 

NIN  is  the  same  as  PP,  T is  the  time  increment  used  in  the  iteration 


process,  and  AF  is  the  matrix  sum  of  the  infinite  series. 

2.10  SUBROUTINE  VECTOR  (N, IP,NP,AF,AS) 

This  subroutine  computes  final  stage  probabilities  and  sums  them  to 
give  the  reliability  and  the  availability. 


I 

IS 


2.12  SUBROUTINE  FIVE  (N) 

The  elements  of  stochastic  matrix  for  Stage  1 are  set  up  and 
calculated. 

2.13  SUBROUTINE  THREE  (N) 

The  elements  of  stochastic  matrix  for  Stage  3 are  set  up  and 
calculated. 

2.14  SUBROUTINE  TWO  (N) 

Sets  up  and  calculates  elements  of  stochastic  matrix  for  Stage  2. 

2.15  SUBROUTINE  ZERO  (N) 

Assigns  zero  to  all  elements  of  stochastic  matrix  before  calculating 
the  elements. 

2.16  SUBROUTINE  ERCL  (N,H,P,T) 

The  number  of  terms  required  in  the  infinite  series  to  satisfy  the 
“8 

prescribed  value  of  10  is  calculated.  At  least  five  but  not  more  than 
25  terms  are  used. 

H is  the  time  increment  (see  TINC)  and  P is  the  number  of  terms  re- 
quired to  satisfy  the  accuracy  criterion. 

2.17  SUBROUTINE  MAT  5 

All  non-diagonal  elements  for  the  stochastic  matrix  of  Stage  1 are 
calculated. 


• m a-  * 4 ^ v.  •■*7  *{.»  < ’■ 


3.0 


PROGRAM  LISTING 


PROGRAM  HIKEIINPUT. OUTPUT, TAPE5«INPUT,TAPE6-0UTPUTI 

COMNON/ETCH/NST 

COHHON/RST/NPH 

COMMON /HI HO/  XLS, XMS, TOM  1 101 

COHN  ON/L  OLLV/T  INC, NTI 101  »ETI  101 

COMMON  /ABC/A  190 , SO  I, XL (101, XM (10) 

COHMON/OEF/RELS(10,2I,P(50.2I,PZI50,2I 

COMM ON/HAL T/IT,RBLI10I,RAL(10I  ,NIS ( 10 ,21 , TEI 10, 2 1 

COMHON/NEM/NIND,NSF,NIN 

C NIN  IS  THE  NUMBER  OF  TERMS  IN  THE  INFINITE  SERIES 

C MINIMUM  NUMBER  OF  TERMS  IN  SERIES  IS  S 

C IF  TRUNCATION  ERROR  IS  NOT  LESS  THAN  1.0E-8  DETERMINE 

C HON  MANY  TERMS  ARE  NECESSARY  TO  OBTAIN  THIS  ACCURACY 

C 25  TERNS  IS  THE  UPPER  LIMIT 

TONI  1 1 x 0.0 
T0HI2I  * 262. 

C TOM (21 , TIME  TO  ENO  OF  PHASE  1 

TONI  3 1 x 630. 

C TON  1 31,  TINE  TO  ENO  OF  PHASE  2 

T0NI6I  * 1200. 

C TOM (61 • TINE  TO  ENO  OF  PHASE  3 

C NPH,  NUMBER  OF  PHASES  IN  MISSION 

C NST , NUMBER  OF  STAGES  IN  RELIABILITY  BLOCK  DIAGRAM 

NST  = 5 
NPH  x 3 
TINC  » .5 
00  6 J = l.NPH 
TOT  x TOM ( J ♦ 1»  - TONIJ1 
TN  x TOT/TINC 
NTIJI  x IF  I X (TNI 
JT  x NTIJI 
XNT  x FLOATIJTI 
SM  x XNT*T  INC 
ETUI  x TOT  - SM 
6 CONTINUE 
XLIll  x 2300. 

XL (2 1 x 2300. 

XLI3I  x 22500. 

XL (6 1 x 12700. 

XL (5 1 x 910. 

XMI1I  x 6.3 
XHI2I  x 6.3 
XMI3I  x 2.6 
XHI6I  < 2.1 
XMI5I  x 6.2 
00  1 J x 1,5 
XLIJI  > l./XLIJI 
1 XMIJI  x l./XNIJI 
00  10J  > l.NPH 
RALIJI  > 1.0 
10  RBLIJI  x 1.0 
IT  • 0 
CALL  HUM (5  I 
XLS  x 22200. 

XMS  x 21.3 
CALL  HUM (3 1 
XLS  x 19600. 

XMS  x 6.6 
CALL  HUM  12 1 
00  6 IY  x 1,2 
XLS  x 1./7000. 

CALL  HUN  (II 
6 CONTINUE 
STOP 
ENO 
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«: ■■  - sattfl 


miHfcnrJh 


SUBROUTINE  HUM  UNI 
COMfON/RST/NPH 

COWON/HAL  T/IT.RBL  <10  I ,RAL 110 1 ,NIS < 11  .El . TEI 10, 21 

COHNOM/LOLLY/TINC.NT  < 101  «ET<10I 

COMMON  /ABC/A  I SO, SOI , XL<10I<XH<10I 

COHHON/NE M/NINO, NSF, MIN 

COHHON/OEF/RELS  < 10 ,21  ,P<50,2l,PZ<5t,2l 

RELSII.JI,  I - PHASE  NUMBER,  J > 1 RELIABILITY, 
PII.JI ,P<I,Jt,  I RON  NUMBER,  J AS  ABOVE 
OIHENSI ON  AF ISO, SOI, AS ISO .50 1 

NSF , NUMBER  OF  STATES  IN  MHICH  SYSTEM  IS  UP 
INPUT  FORM  OF  MATRIX  HAS  ONES  SUBTRACTED  FROM 
DIAGONAL  ELEMENTS 
TRANSPOSE  INPUT  MATRIX  AF 
CALL  STACK  UN,  N2 1 
N x N2 

IFININO.Eq.OI  GO  TO  7 
DO  15  J • 1,N 
00  IS  I > 1,N 
K * I 


ASIL.KI  * AII.JI 
15  CONTINUE 

00  58  J * 1 ,N 
00  SS  I x 1,N 
SO  AII.JI  x ASII.JI 
00  2 NP*1 , NPM 
00  2 IP  x 1,2 

IFINP.EQ.2.ANO.IT.EQ.O.AN0.1P.EQ.1I  CALL  CONVIPZI 
IFINP.EQ.l.ANO. IT. EQ.O. ANO.IP.EQ.il  CALL  RECONIN.PZ.ASI 
N x N2 

IFIIP.EQ.il  N x NSF 
CALL  MOUSE  IN.AF, AS, NP.IPI 
CALL  VECTORIN.IP.NP.AF.ASI 
00  G J x 1 , m2 

6 PZU.IPI  x PU.IPl 
2 CONTINUE 

7 CONTINUE 
CALL  FAT 
RETURN 
ENO 


SUBROUTINE  STACKUN.NI 
IFUN.EQ.2I  CALL  TNOIN) 
IFUN.EQ.3I  CALL  THREE  <NI 
IFUN.EQ.SI  CALL  FIVEINI 
IFUN.EQ.1I  CALL  SER 
RETURN 


SUBROUTINE  FAT 

COMMON /HAL T/IT, RBL 111  I, RAL 111)  .NISI II ,2) .TCI1Q, 2 I 
COHMON/ETCH/NST 

COMNON/LOL'  Y/TINC,NT( 101  .ETI10) 

COMM  ON/RST /NPH 

COMMON /OEF/REL  S(1I«2)«P(M,2).PZI90,2) 

IT  « IT  ♦ 1 
WRITE(6,1)  IT 
IF(IT.EQ.NST)  WRITEI6.2I 
IF(IT.EQ.NST)  WRITE  (6  « A)  NPH 

tF(IT.EQ.1.0R.IT.£Q.2.0R.IT.EB.3>  WRITEI6.3)  IT* T IMC 
00  7 J a l,  NPH 
COT  * 1.1 

IFIJ.EQ.2. ANO.IT.EQ.l)  COT  a RELSd.il 
IFIJ.EQ. 3. ANO.IT.EQ.l)  COT  a RELSI 1. II *RELSI2. 1) 

RBLIJI  * RBLI J I*RCISI J»ll *C0T 
RALIJ)  * RAL(J)*RELS(J>2> 

WRITE (6. SI  J 

IFCIT.EQ.A.OR. IT.EQ.5)  CO  TO  II 
WRITE  1C. 6)  RBLIJI  .MIS  (J,  II . TE  (J.  II 
WRITE (6, SI RAL I Jl  , NISI J,2I  , TE < J.2I 
CO  TO  7 

11  WRITE  16.9)  RBLIJI, RALIJI 

7 CONTINUE 

1 FORMAT  1 1H1,  20X, 18H0UTPUT  UP  TO  ST  ACE. 13) 

2 FORMAT  IlHO.lltX  . 23MTHIS  IS  THE  LAST  STACE.I 

A FORMAT (UK.19HTHE  OUTPUT  AT  PHASE, 13/1 IX. S1HREPRESENTS  THE  RESULTS 
1 FOR  THE  ENTIRE  CONFIGURATION) 

3 FORMAT  1 1HI, 9X, 37H A STOCHASTIC  MATRIX  MAS  USED  IN  STAGE, I3/1IX. 11MS 
1TEP  SIZE  >,FS.2,23H  IN  ITERATION  PROCEDURE) 

5 FORMAT (1H0,2|X,5HPHASE«I2,7H  OUTPUTI 

6 FORMAT (1H0 , 20X , 1 3HREL IABILITT  », F8.5/21X, 36HNUNBE R OF  TERMS  IN  INF 
UNITE  SERIES  a,I3/21X,18HTRUNCATI0N  ERROR  *,ELA.6I 

8 FORMAT  1 1H0 . 2IX , 13H AVAILABILITYa,F8.5/21X, 36HNUHBER  OF  TERMS  IN  INF 
UNITE  SERIES  * , 1 3/21X .18HTRUNCATI0N  ERROR  x,E1A.6I 

9 FORMAT  1 1H0 , 2IX , 13HREL I ABILITY  *,F8 .5/21X, 1AHAXAIL ABIL ITT  «.F8.5> 
RETURN 

ENO 


SUBROUTINE  COHVIPI 

COMMON  / ABC/A  (50. 50),  XL  111  I.  XMI 18) 

COHHON/NEH/NINO,  NSF  , NIN 

OIMENSION  P(S0,2I,B(3.S0I.C(S) 

NSF  » 8 

00  1 I * 2, A 

ClI-ll  * P 1 1,2  ) 

00  1 J = 1.32 
BII-1.J)  a Alt  , J) 

00  2 I a 2,8 

PII. 2)  a PCI  ♦ 3,2| 

00  2 J a 1,32 

A (I,  J)  a A 1 1*3  , J) 

00  3 I a 9,u 
P 11,21  a CII-8) 

00  3 J a 1,32 
A (I,  Jl  a Blt-8,  J) 

00  A J a 2, A 
00  A I a 1,32 

BIJ-l.I)  a All , Jl 

00  9 J a 2,8 
00  5 I a 1,32 
A (I,  J)  a A 1 1,  J .3 ) 

DO  8 J a 9,11 
00  6 I a 1,32 
A (I,  Jl  a B(J-8,I) 

00  7 J a 1,32 

PIJ. l)  a PIJ.2) 

RETURN 

ENO 
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AD-A0S8  707 


UNCLASSIFIED 


DAVID  W TAYLOR  NAVAL  SHIP  RESEARCH  AND  DEVELOPMENT  CE--ETC  F/G  14/4 
A COMPARISON  OF  ANALYTIC  AND  SIMULATION  RELIABILITY  AND  MAINTAI— ETC < U) 
AUG  78  M GRAY 


DTNSRDC-78/070 


NL 


END 

OATE 

FILMED 

11-78 

DOC 


SUBROUTINE  RECON  IN, P,  AS) 

COHHON/NEN/NIN  0.  NSF  ,NIN 
COMMON  /UC/IIM.MMUlll.imilll 
DIMENSION  rni,n,CHI.DIUMSnMII 
CALL  FIVE  INI 
DO  IS  J • l.N 
DO  IS  I > l.N 
X ■ I 
L ■ J 

ASIL.KI  « All,  Jl 
IS  CONTINUE 

00  SI  J > l.N 
DO  SI  I • l.N 
St  A II. Jl  ■ ASII.JI 
00  1 I > 1.3 

1 cm  « pii*i.2i 

00  2 I ■ 2.8 

2 0111  « PtI.ZI 
005  I * 2.8 

S P II* 3. 21  ■ Dll) 

00  3 I « 1.3 

3 P 11*1. 21  » CIII 
00  A I « 1,32 

A PCI, II  » Pit. 21 
RETURN 
ENO 


SUBROUTINE  SER 

COMNOM/HIHO/  KLS.XMS.TONIlt) 
COMHON/RST/NPH 

COMHON/DEF/RELSIIO.Z) .PI58.2I.P2IS8.2I 

COMM  OM/NEN/NINO,  NSF,  NIN 

NINO  » 0 

DO  9 J * l.NPH 

TN  « TONI J«l) 

R ELS  I J, II  » EXP|-XLS*TNI 
RELSCJ.2)  * RELSI J.l) 

9 CONTINUE 
RETURN 
ENO 


SUBROUTINE  MOUSE  IN,  AF,  AS.NP,  IP) 

COMMON  / ABC/AISt ,58 I.XLIltl.XNIltl 
COMMON/LOLL Y/T INC » NT C 18)  .ETIltl 
COMMON/NEH/ NINO.  NSF, NIN 

COMHON/HAL  T/IT.RBL  lltl.RALIll)  .NISIlt  ,21  .TEI II,  2 1 

DIMENSION  AF  15  0, SI), AS  151, $11 

CALL  ERCL I N.TINC. PP.TI 

TEINP.IP)  * T 

NXN  » IFIXIPP) 

C MATRIX  AF.  FIRST  TNO  TERMS  IN  SERIES 

00  A I * l.N 
OOA  J > l.N 
PR  * l.l 

IFtI.EQ.J!  PR  * 1.0 
AF  II,  Jl  ■ A II , Jt  *T  INC  * PR 
C INITIALIZE  OPERATIONAL  MATRIX  AS 


A ASII.JI 

« A II, Jl 

c 

AF 

INPUT  MATRIC 

c 

AF 

INPUT  MATRIX 

C 

TOT 

TOTAL  TINE 

c 

TINC 

INCREMENT  OF  TINE 

c 

NIN 

NUMBER  OF  TERNS  IN 

C P FINAL  RELIABILITY  VECTOR 

CALL  CALCI AF.A S.N.NIN.TINCI 
RETURN 
ENO 


96 


I 


SUBROUTINE  VCCTORIN.IP.NP. AF.ASt 
C OMNON/NCM/ NINO* NSF »NXN 
CONNON/OCF/RELSIlt.21  .PI9t.2l.PZ 190. 21 
CONNON/LOLL  Y/TINC.NT  I II)  *ET  I II) 

COIBION/HAL T/IT • RBL (111 »RAL I IB I .NISU0.2I .TEI1I.2I 
oimension 

00  17  J • 1«N 
17  PSIJI  « FZIJ,1PI 
NTS  * NT  INF) 

00  12  KT  ■ 1.NTS 
IMKT.CO.il  00  TO  29 
00  1*  J « 1*N 

10  PSIJI  * MJ.IM 
29  CONTINUE 

DO  11  I • l.N 

a » o. 

oo  is  j > l.N 
13  0 ■ Q ♦ PSI  JI*AF II.  Jt 

11  PII.IPI  • Q 

12  CONTINUE 
EF  * ETINI 

IFtEF.EQ.I.OI  SO  TO  1* 

CALL  CALCUF.AS.N.NIN.EFI 
00  93  J > l.N 
93  PSIJI  « PIJ.IPI 
DO  91  I • l.N 
0 * 0.0 
00  52  J * l.N 
92  0 ■ Q ♦ PSI Jt*AF(t« Jl 
91  PII.IPI  * 0 
19  PEL  * 0.9 

00  3 J * l.NSF 
3 PEL  ■ PEL  ♦ PIJ.IPI 
PELSINP. IPI  » PEL 
NISINP.IPI  * NIN 
RETURN 
ENO 


SUBROUTINE  FIVE  INI 

CONNON/OEF /PI9BI .P2I9BI.REL 

CONN ON  /ABC/A I 50 .901 . XLI1B I . KNI1BI 

CONNON/NEH/NINO.NSF.NIN 

NINO  * 1 

NSF  « 11 

N * 32 

CALL  ZEROINI 

CALL  NATS 

CONPUTE  DIAGONAL  ELENENTS  OF  HATRIX  A 
CALL  0IA6INI 
RETURN 
Cl 


SUBROUTINE  THREE  IN) 

COMMON  /ABC/AI9l,SI>,XLtll),XMIll> 

COMMON  /HI HO/  XLS, XNS, TONI II) 

COMM  ON/ DCF /PIN  01  .PZINII.RCL 
COMMON/NEN/NtNO«NSF,NIN 
*LS  > l.l/XLS 

* MS  * l.t/XMS 
NINO  » l 

NSF  * 2 
N » N 

CALL  ZERO  INI 
*11,21  ■ 3.*XLS 
*12,11  » XNS 
*12,31  ■ 2.*KLS 
AI3,N)  « XLS 

* IN, 31  * 3 . 'XNS 

COMPUTE  0IA60NAL  ELEMENTS  OF  MATRIX  A 
CALL  OIACIN) 

RETURN 

ENO 


SUBROUTINE  TMOINI 

COMM ON /HI MO/  XLS, XNS, TON I 10 I 

COMMON  / ABC/A 151 ,5R) « XLI1I I • XHI 111 

COHMON/OCF /PINO) .PZINtl.RCL 

COMM  ON/NCM/NIMO,  NSF,  NIN 

XLS  » l.l/XLS 

XNS  « l.l/XHS 

NSF  * 2 

NINO  > 1 

N » 3 

CALL  ZEROINI 
A II, 2)  - 2 • *XLS 
*12,11  » XNS 
*12,3)  ■ XLS 
*13,2)  • 2.*XHS 

COMPUTE  OIASONAL  CLEMENTS  OF  MATRIX  A 
CALL  OIACIN) 

RETURN 

ENO 


SUBROUTINE  ZERO  (Ml 

COMMON  /ABC/OIM.SBI.XMtai.XNUOl 

COMMON /OEF/RELS(  IB  »2> 

00  2 I ■ t.N 
00  2 J ■ t.N 
PZd.ll  > 0.0 

»m.n  - o.i 

2 A(I.J»  - M 
Fill. It  « 1.1 
Fill. 21  ■ 1.0 
RETURN 
END 


3 

C 

C 

5 


7 

*0 

12 

6 


SUBROUTINE  CALC (AF.AS.N, KIN, Tl 
COMMON  SABC/A(S0.5«I.XL(iai.XN(10> 

DIMENSION  AF (SO. SO I. AS (SO .SOI* A2 (SO. SO) 

NJ  « NIN  - 1 
TS  * 7 

00  6 JJ  * l.NJ 
XN  * FLOAT (JJ1 
TS  * TS*T/(XNtl.OI 
00  5 I * l.N 
00  S J * l.N 
Q * 0. 

00  J K * l.N 
Q * Q ♦ AS(I.K)*A(K.J) 

CONTINUE 
A2d,J>  » Q 

MATRIX  A2  RESULT  OF  MATRIX  MULTIPLICATION  OF  AS*A, 

NHERE  AS  * A»»NJ 
CONTINUE 
00  7 I * l.N 
00  7 J » l.N 

SET  RESULT  OF  MATRIX  HULT.  A2  EOUAL  TO  OPERATIONAL  MATRIX  AS 
AS(I,JI  » A?(t,J) 

COMPUTE  MU- 1 TERM  IN  SERIES 
A2(I.JI  » AS (I • J > *TS 
SUN  UP  SERIES 

AF(I.JI  * AFII.JI  ♦ A2(I, J) 

FORMAT (J(10X.F10.SII 

CONTINUE 

CONTINUE 

RETURN 

END 
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.v 


A(V 


SUMOUTINC  HAT? 

COMMON  /••C/MS0.50I,XLI10I.XHI10I 
*11*21  ■ XL  111 
*11.31  * XL  III 

• 11,51  a XLISI 

• II. •>  ■ KLIM 

• II, 71  a XLISI 
ft  12,11  « XNIlt 
ft  (2«LI  a XL  121 

• 12.121  ■ XLI3I 
•12,131  a XLILI 

• 12.1*1  a XU?  I 

• 13,11  a XH  (21 

• 13,  tl  a XL  111 
•I3,l?l  a XLI3I 

• 13.1*1  a XLILI 

• 13,171  a XLIfl 

• CL,  2 1 a XH  121 
« I*.  31  a XH  ID 

• 16,101  a XLI3I 
ft  I*.  191  a XL  CL  I 
AIL, 2ft  I a XLI?  I 

• l?,ll  a XH  131 
A IS,  SI  a XL  (LI 

• I 5,101  a XLISI 

• IS,  121  a XLI1I 

• 15,151  a XLI2I 

• 16,11  a XHCLI 
« (6,  SI  a XL  (31 

• 16,91  a XL  (51 
*16,131  a XLIll 

• (6,161  a XL(2 1 

• 17, II  a XH (51 

• 17,91  a XL  (LI 

• ( 7,101  a XLISI 

• 17,  1LI  a XLIll 
•17,171  a XLI2I 

• 10,51  a XHCLI 
MS, 61  a XH (31 

• I 8,111  a XLC5I 

• IS,  21 1 a XLIll 

• 16,221  « XLI2I 

• 19,61  a XHC5I 
•19,71  a XHCLI 

• I 9,111  ■ XLI  31 

• 19,231  a XLIll 

• I9.2LI  a XLI2I 

• 110,  51  - XHI5I 

• lift,  71  - XNI3I 

• 110.111  ■ XL I LI 

• 110,251  ■ XLIll 

• 110,261  > XLI2I 

• 111,  01  ■ XMI5I 

• 111,  91  ■ XNI3I 

• 111,101  * XHILI 

• 111,271  a XLIll 

• 111,201  a XLISI 


’ 


lilt!  21 

n«l) 

kilt.  91 

xn<i> 

•<i2.ia> 

XL<2> 

tiu.tll 

Xt(4l 

liu.tf) 

XL<9) 

mil  2) 

XH)4) 

• 113.  W 

XN<1) 

*113,19) 

XL<2) 

*113,21) 

XUS) 

*113,23) 

XU9I 

*m.  2) 

XD(5> 

*)14.  7) 

XN(1) 

*114,21) 

XL(t> 

* 119.23) 

XU4) 

*114,29) 

XUS) 

*119.  3) 

XH<3) 

* (19,  9) 

XN(  2) 

• 119. 1*) 

XU1) 

*<19. 22) 

XU  4) 

• 119,26) 

XL<9) 

• <16,  3) 

XN(4) 

« <16,  6) 

XN<2) 

* <16,19) 

XL<  1) 

*<16, 22) 

XUS) 

k<16, 24) 

XL<5) 

k <17 , 3) 

XK<5) 

*<17,  71 

XH(2) 

• <17,21) 

XL  ( 1 ) 

* <17 ,24) 

XL  < 4) 

* <17,26) 

XL)  3) 

• <1«.  4) 

XN(3) 

*<18, 12) 

XH(  2) 

*<18,151 

XN<1) 

• <18,30) 

XUS) 

*<18, 31) 

ILI4I 

• <19,  4) 

XN<  4) 

• <19,1  3) 

XH(  2) 

• <19,16) 

XM(1> 

•<19,29) 

XU5) 

• (19,38) 

XUS) 

*<20,  4) 

XM(9) 

*<20, 14) 

XH<  2) 

* <20,17) 

XH<1) 

•<20 ,29) 

XL<4) 

k<20, 30) 

XL)  3) 

k<21,  8> 

XH(1) 

• <2l,12> 

XH<4) 

*<21. 13) 

XN(  3) 

*(21,2  7) 

XL  < 5 ) 

*<21, 31) 

XL  ( 2) 

*(22,  8) 

XH(2) 

*(22,151 

XM(4) 

*(22.16) 

XH<3) 

*<22,281 

XL<5) 

*<22,311 

XL)  1) 

* <23,  9) 

XH<  1) 

*(23,13) 

XK(  5) 
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